Morrow privacy notice

Website privacy notice. Matthew Farris Montz provides a furniture visualization tool to participating retailers.

Configured notice version: 2026-09-23-website-1.

What Morrow processes and why

To prevent abuse of the free demo, Morrow uses a one-way keyed hash of the connection address supplied by its hosting provider. IPv6 addresses are grouped by network. The queue service keeps this rate-limit identifier for up to 24 hours; it is separate from optional analytics and does not contain the original address. Shared demo spending counters contain only dates and totals. Demo requests and provider attempts are limited even when a request fails or is cancelled.

Morrow processes your room photo, a layout guide made from it, furniture selections, placement instructions and the generated image. Consent, session identifiers, request status and limited security and usage records help run the service, prevent misuse, handle deletion requests and measure retailer usage. You do not need a Morrow shopper account.

Who processes it

Morrow uses Fly.io for application hosting and database and queue services, and Tigris for private image storage. Morrow sends your room photo, relevant layout guide, furniture reference images and instructions to Google Gemini to create the visualization. When operational notifications are enabled, they pass through n8n and Gmail and contain limited diagnostic identifiers and status, not room photos. The retailer and its ecommerce provider operate the surrounding store and checkout under their own privacy notices.

Morrow requires a Google Cloud project with active billing before processing customer photos. Under Google's Paid Services terms, prompts and responses are not used to improve Google's products. Google may retain them for a limited period for safety, policy enforcement and required disclosures. See Google's Gemini API terms. This service is for adults aged 18 or older. Morrow does not claim Zero Data Retention, and deleting a photo from Morrow does not independently delete provider-held copies.

Optional website analytics

With your permission, the Morrow embed records pageview, click, visualizer-open, product-selection, cart and purchase events, their times, a random session identifier, approved catalog product identifiers and coarse page or control categories. It does not collect page URLs, form contents, passwords, payment details, email addresses or customer names. Your browser sends network information such as an IP address when contacting hosting services; Morrow does not put it into these analytics events.

Analytics is off until you opt in. It respects Global Privacy Control and Do Not Track. The preference and a random identifier may be stored in this tab's session storage after consent to connect events across pages on the same website, expiring after 30 minutes. Use the embed's analytics choice to withdraw; this stops new analytics and clears local analytics state. Previously accepted events remain until cleanup or an applicable deletion request. Raw analytics events are eligible for automatic deletion after 90 days. Operational render and consent records have separate purposes and can remain after analytics deletion.

Browser-reported purchases and server-confirmed purchases are reported separately. Conversion percentages describe consenting sessions with a recorded purchase in the selected period and do not identify individuals or include all website visitors.

Sales contact inquiries

When you submit Morrow's contact form, we store your name, email address, business name, optional website and platform, message, submission reference, consent time and contact status to respond to your inquiry. Please do not include passwords, payment details, customer records or sensitive personal information. This is a request to discuss Morrow; it does not create an account, purchase software or subscribe you to marketing.

Inquiries are stored in Morrow's PostgreSQL database hosted through Fly.io and are visible only in the private owner inbox. Contact submissions are not sent to an image AI provider. Morrow notifies its owner through n8n and Gmail using only an inquiry reference and a private inbox link; the submitted contact details and message stay in the private inbox. An owner may use your email address to reply. Rate limiting uses a hashed email identifier in the queue service for up to one hour; Morrow does not store your IP address in the inquiry.

Inquiries expire 90 days after submission, disappear from the owner inbox at expiry and become eligible for hourly automatic deletion. Outages can delay physical deletion. Marking an inquiry as contacted does not extend that period. You can request earlier deletion using the privacy contact below and your submission reference. Copies in email correspondence or provider backups can follow separate retention schedules. Contact inquiry notice version: contact-2026-09-06-v1, effective September 6, 2026.

Saved rooms and retailer requests

Where Save my room is available, choosing it creates a separate private copy of your generated preview and the selected catalog product IDs, SKUs, variants, quantities and available prices. This saved copy expires 90 days after saving. Returning to the room or submitting a request does not extend that period. Saving does not extend storage of the original room photo or layout guide.

Saving alone does not give retailer staff access to your room. If you request a quote, delivery information or a showroom appointment, you share the saved preview, product choices, name, preferred contact method, the relevant email address or phone number, optional message and delivery ZIP code when needed with that retailer's authorized staff. Morrow stores these records in its Fly-hosted database and the saved preview in private image storage. Contact details and messages are separate from optional analytics and are not sent to the image AI provider. Staff can record an assignee, notes, activity, quote versions and a manually reported outcome. An appointment request is not a confirmed booking, and a quote is not a purchase.

Saved-room and quote links are private access links: anyone you give the link to can open the shared page until it expires or is revoked. Shared pages omit contact details and internal staff notes. Keep these links private. Quote links can expire sooner than the saved room and cannot outlast it.

You can use the saved room's deletion control or contact Morrow for earlier deletion. Deleting or revoking the saved room disables its room and quote links and removes associated contact details, messages and staff notes from active records. At expiry, access stops and these records become eligible for scheduled cleanup. Image deletion is retried after failures; outages can delay physical removal. Limited operational records can remain. Copies already downloaded, retailer correspondence, provider-held copies and backups have separate retention.

Rooms saved on this device

The Save room and My rooms controls can keep a generated preview and its selected product details in this browser on this device for up to 30 days. This browser copy is separate from the saved-room link service described above. It does not create a shopper account, send a request to the retailer or extend the original uploaded photo's storage.

Use My rooms on the same retailer's visualizer in the same browser to reopen or delete a saved room. Up to six rooms can be kept within a 60 MiB storage limit. Browser settings may prevent saving, and clearing browser data, private browsing or browser storage eviction can remove saved rooms sooner. Expired rooms become unavailable and are removed when Morrow next opens its local room storage. Anyone with access to your browser profile may be able to view these rooms. Copies you download remain under your control.

Retailer subscription billing

When a retailer proceeds to Morrow subscription checkout, Stripe handles payment and billing management. Morrow sends the retailer's billing email and website-account and checkout identifiers to Stripe. Payment card information is entered directly into Stripe; Morrow does not store full card numbers or card security codes. Stripe handles that information under its own privacy notice.

Morrow stores limited subscription records in its Fly-hosted database: the billing email used to prepare checkout, Stripe customer, checkout, subscription and invoice identifiers, payment amounts and currencies, paid-period dates, billing status and limited webhook processing records. These records connect payment to the correct retailer, prevent duplicate charges and track paid access. They are separate from shopper analytics and are not sent to the image AI provider.

The 90-day contact-inquiry cleanup does not apply to subscription billing records. Billing records are retained separately to operate subscriptions, reconcile payments, resolve billing questions or disputes and meet recordkeeping obligations; cancellation does not automatically erase payment history. Contact the privacy address below to request access, correction or deletion. Stripe may retain its own records under its policies. Retailer billing disclosure effective September 8, 2026.

Retailer dashboard accounts

A retailer administrator can receive a private invitation to view that retailer's aggregate reports and manage its subscription. Morrow stores the administrator's email, retailer association, a salted password verifier and hashed invitation and session tokens in its Fly-hosted database. These account records are separate from shopper analytics and are not sent to an image AI provider. A secure, essential sign-in cookie expires after eight hours; invitations expire after seven days and work once. Signing out invalidates that session. Morrow can revoke access or reset an invitation, which invalidates previous sessions and the password. Contact Morrow to request account correction or removal. Dashboard account disclosure effective September 10, 2026.

Preview-to-order reporting

When analytics is permitted, Morrow can link a preview request and its completion to the same random visit identifier. The dashboard can count store-reported orders that follow a completed preview within 30 minutes in that visit. This does not identify the shopper, verify that the purchased item was previewed, or establish that Morrow caused the sale. These visit links follow the same 90-day analytics retention and are not added when analytics is declined.

Photos and retention

Room photos and layout guides are held in private storage. They become eligible for deletion 15 minutes after a request finishes, fails, is cancelled or ends with an uncertain outcome. Successful requests may have their inputs removed sooner. Inputs needed by an active request or retry remain protected.

An hourly cleanup process removes eligible images. Removal can take roughly another hour in normal operation, and outages or errors can delay it further.

Generated results have a separate expiry set by the retailer, from one hour to seven days. Results become unavailable through Morrow at expiry and are then removed by scheduled cleanup. A room saved on this device follows the separate 30-day browser period. Where saved-room links are enabled, their server copy follows the separate 90-day period described above. Changing a retailer's setting does not change an image's existing expiry. Limited consent, render, security and usage records can remain after images are removed.

Your choices

Upload only a photo you have permission to use. Avoid people, personal documents and other sensitive details. You can leave before submitting, use the visualization's deletion control, or contact us or the retailer to request access, correction or deletion.

Deletion from Morrow does not remove copies you downloaded or independently erase copies held by an AI provider. If you contact us, identify the retailer and approximate request time; do not email another room photo or private access tokens.

Contact

matthew.montz@gmail.com