This Privacy Policy explains how Enortic, Inc. (“Enortic,” “we,” “us”) handles personal data when you visit the Morrow website or use Morrow, the company brain for teams and agents.

Morrow is local-first by default. Project data stays on your device unless you choose a cloud, managed, or shared-workspace option.

1. Who we are

Enortic, Inc. is a Delaware corporation. Morrow is our product. Controller for website and account data:

Enortic, Inc.
Dover, DE 19904
hi@enortic.com
(302) 546-5141
Talk to us

2. Data we collect

We collect only what is needed to run the site, your account, and the product you chose.

Website. Pages you visit, referrer, browser and device type, and approximate location from IP. We do not sell this data.
Account and billing. Name, work email, company, plan, and payment metadata processed by our payment provider. We do not store full card numbers.
Demo and support. Information you send when you book a call or contact us, including calendar details.
Product, local-first. Meetings, tickets, chats, files, and memory stay on your device or self-hosted infrastructure. We cannot read that data unless you send it to us for support.
Product, optional cloud. If you enable cloud sync, a shared workspace, or a managed deploy, we process the project data you put there so the workspace can run.
Integrations. Only sources you connect (for example Slack, Jira, GitHub, Notion), and only inside the projects you invite Morrow into.

3. How we use data

Provide, secure, and improve Morrow and this website
Create accounts, authenticate users, and process plans
Respond to demos, support, and security reviews
Meet legal, tax, and accounting duties
Send product or service notices you can opt out of where the law allows

We do not use your company data to train public models. We do not sell personal data.

4. Legal bases

Where GDPR or KVKK apply, we rely on:

Contract — to deliver Morrow and related support
Legitimate interests — to secure the service and understand site usage
Consent — where we ask for it, including optional cookies or marketing. See the Cookie Policy
Legal obligation — where the law requires us to keep or disclose records

5. Sharing

We share personal data only with:

Infrastructure and payment vendors needed to run the service
Integration providers you connect, under your instruction
Professional advisers and authorities when the law requires it
A buyer or successor if Enortic is involved in a corporate transaction

Teammates and agents see project memory only for projects they can access. Private drafts stay with you until you approve them into a project.

6. Where data lives

Local-first is the default. With cloud sync enabled, we use AWS Frankfurt (EU) or Virginia (US). Enterprise customers can request data residency, air-gapped, or on-prem deployment.

7. Retention

Website and account records are kept only as long as needed for the purpose collected, then deleted or anonymized. You can wipe a project’s memory without deleting the account. Disconnecting an integration stops new pulls; already captured memory stays until you delete it.

8. Security

We use TLS 1.3 in transit, AES-256 at rest for cloud components, and the OS keychain for local secrets. Access is role-based. Business and Enterprise include Google or Microsoft Entra SSO. See our Trust page and DPA.

9. Your rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection, and you may withdraw consent. You may also complain to a supervisory authority, including a KVKK or GDPR authority. To exercise rights, email hi@enortic.com, use Talk to us, or call (302) 546-5141.

10. Children

Morrow is for business use. We do not knowingly collect data from children under 16.

11. Changes

We will update this page when our practices change and revise the date above. Material changes will be flagged on the site or by email when we have your address.