Your work. Your privacy.

What this notice covers

This notice covers MorningAgent.com and the MorningAgent workspace at /app, including Text to Speech. You can browse before signing in; saving account content and generating audio use your account. Creator subscriptions provide generation credits.

Links to other services lead to their own terms and privacy notices. This notice describes MorningAgent’s use of those services, not every activity on those services’ websites.

Accounts and the content you save

Your chosen sign-in provider shares basic identity information with our account service, including an account identifier, email address and profile information such as your name or profile image when supplied. Google sign-in requests basic identity scopes, not access to Gmail, Google Drive or Calendar. Apple sign-in requests your name and email; if you choose Hide My Email, Apple supplies a private relay address. Your provider password is entered with Google or Apple, not MorningAgent.

Supabase provides account authentication, our database and private file storage. Your saved scripts, favorite voice selections, uploaded reference files, and generated files when available are associated with your account. We use this information to restore your workspace and provide the features you choose. Signing out does not delete saved account content. Support and feedback requests you choose to send, and replies to them, are stored privately with your account so you can follow the conversation in My requests.

Uploaded and saved account content is protected by account ownership checks rather than published as a public gallery. Service administrators and the infrastructure services used to run the product may process it for operation, troubleshooting and security; private storage does not mean that only your device can access the data.

Guest editing and browser storage

Guest scripts, guest favorites and interface preferences can be saved in storage on the browser you use. Authentication session data is also stored so a signed-in workspace can remain available after a reload. A script or voice selected on the public site is passed to the workspace when you choose to continue there.

Recorded voice samples play existing audio; they do not generate a recording from your script. If you use the separately labeled Quick listen browser feature, it uses your browser or operating system’s speech service, which may depend on that vendor’s online service. Microphone access requires your browser’s permission.

Clearing MorningAgent’s site data in your browser removes local guest drafts and preferences and can sign you out. It does not remove content already saved to your account. Download any local drafts you want to keep before clearing site data.

Public-page measurement with Whop Pixel

The public production website uses Whop Pixel to record page views and help measure visits and eventual checkout attribution. The pixel loads from Whop’s tracking service and sends a page event for the public page you visit. Whop may process technical data and identifiers such as IP address, browser information, referring page and cookies under its own privacy policy.

Our pixel is excluded from the private /app workspace, local previews and authentication return URLs carrying sign-in credentials. We do not send script text, uploaded files, private account records or generation prompts as custom pixel events. MorningAgent does not send private billing records as custom pixel events.

Your browser’s tracking protection or a content blocker may block the pixel. You can also clear or block cookies and site data through browser settings. Cookie preferences controls Whop Pixel as well as Google, Microsoft and Umami measurement. Whop Pixel follows the same regional rules and saved choices, and never loads before permission where the prompt applies.

Optional analytics and advertising measurement

When optional measurement is enabled under the regional rules below, MorningAgent uses Umami Cloud for simple traffic, campaign and conversion reports. Umami receives sanitized page paths, approved campaign labels, referring website origins and basic checkout and creation events. A newly verified account can send a sign_up event; a server-verified first production payment can send a purchase event with the subscription amount and currency. No account IDs, raw payment IDs, names, emails, scripts, recordings or private file URLs are sent to Umami. Umami is disabled on local and preview deployments and credential-bearing authentication URLs. You can decline or withdraw optional measurement through Cookie preferences in the website footer or workspace menu. These browser reports can undercount because of declined consent, content blockers or a missing visit after payment; billing records remain the source of truth.

When optional measurement is enabled, OpenAI ChatGPT Ads measures page views, completed signups and server-verified first purchases using its Measurement Pixel. OpenAI receives technical browser information, advertising click and browser identifiers, opaque event IDs, and purchase amounts in USD. Its first-party __oppref cookie lasts up to 30 days and __obref up to 365 days; browser restrictions can shorten these periods. We do not manually supply customer contact details. OpenAI enables automatic advanced matching on this pixel: it may detect supported customer information on the page, normalize it and hash it in the browser before including it with events; raw contact values are not sent through this matching feature. Withdrawal stops measurement and removes these pixel cookies. When optional measurement is enabled, MorningAgent loads Google Analytics 4 to measure visits and basic product activity, and the Google Ads tag to associate advertising visits with completed account creation and a first confirmed paid subscription. Microsoft Advertising UET measures advertising visits and first confirmed paid subscriptions under the same regional rules and saved preferences. Microsoft may process technical data, ad-click identifiers, advertising cookies and the verified subscription amount and currency. Google may process technical data such as IP address, browser details, ad-click identifiers and advertising cookies. This measurement does not itself improve organic search rankings.

We use our hosting provider’s approximate country lookup to choose the initial measurement setting; we do not request precise device location or store your IP address for this decision. For visitors identified as being in the United States, optional measurement may start without a prompt unless a saved refusal or Global Privacy Control signal blocks it. Elsewhere, and when location cannot be determined, measurement stays off until you choose Accept. This is a conservative regional configuration, not a claim that every country has identical requirements. Global Privacy Control keeps optional measurement off. Open Cookie preferences in the website footer or workspace menu to accept, decline or change your choice. We opt events out of future OpenAI user-level personalization and keep Google and Microsoft enhanced conversions off: we do not provide your email address, name, scripts, prompts, recordings, files, account IDs or raw payment IDs as conversion data. Conversion events use opaque duplicate-prevention tokens and, for a verified subscription, its plan amount and USD currency. Authentication callback URLs carrying credentials are excluded from tag initialization. No localhost or preview deployment sends these measurement events. Microsoft tracking uses sanitized page paths and validated click identifiers, with automatic page, form and interaction collection disabled. We do not enable Microsoft Clarity session recording or provide customer contact information for enhanced conversions. Analytics receives page paths with only validated ad-click identifiers (other query parameters and fragments are removed), the referring website origin, approved campaign labels, and events for checkout and generation activity. Automatic form, search, outbound-link, video and download measurement is disabled. Scripts, recordings, voice descriptions, email addresses and private file URLs are not included in Analytics events. Existing cookie choices are requested again when a new measurement provider is introduced.

Account creation is measured after authentication verifies a newly created account. Subscription measurement is based on server-verified production billing, not a checkout click or return URL alone. Test payments, unpaid subscriptions and renewal payments do not count as new paid-subscriber conversions. Browser blockers, declined consent and incomplete checkout returns can prevent measurement.

Hosting, AI processing and payments

Vercel hosts the website and application endpoints. Hosting, authentication and storage services may process technical request information to deliver the site, protect accounts and diagnose failures. Their processing can take place in the locations where those services operate; MorningAgent does not promise storage in a particular country.

Editing a script, choosing a voice or changing settings does not itself start an AI generation request. When you press Generate, the text, settings and any uploaded files needed for that request are sent to the AI service that processes it. Results and creation information may be saved to your private workspace. The credit price appears before you generate.

Stripe or Whop provides hosted subscription checkout and billing, as identified at checkout and on your receipt. Your payment provider handles payment details and provides subscription and payment status information used to manage access and credits. MorningAgent does not collect card numbers. Test billing records are kept separate from real generation balances.

Retention and the controls available now

Use Assets to download saved scripts, uploaded files and completed creations. Available delete actions remove saved drafts and uploads; completed creations do not currently have a self-service delete action. Removing an item from the workspace does not promise immediate removal from all operational logs, backups or a third-party service that has already processed it. Security, transaction and diagnostic records may be retained separately from the item itself.

There is currently no automatic full-account deletion button or published deletion-response deadline. You can open a private account-data request in Support, including a request about export or deletion. Our support page also explains the self-service controls that are available. Do not upload sensitive material that requires a contractual retention schedule, regulated handling or an immediate deletion guarantee.

MorningAgent is a general-purpose creative tool and is not directed to children under 13. Do not submit another person’s private information or recordings unless you have the permission needed to use them. We retain a private, one-way fingerprint of the email used for a signup-credit grant to prevent duplicate grants, including after account deletion. This notice will be revised when data flows or available controls change; the review date appears at the top of this page.