Privacy Policy

1. Who we are and how to contact us

Morganson is operated in the United Kingdom.

• Email: hello@morganson.co
• Website: https://morganson.co

2. The personal data we collect

We collect and process the following categories of personal data:

• Account data: your email address and an encrypted (hashed) password, created when you register. If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password. Authentication is handled by our processor, Supabase.
• Saved jobs: the jobs you save, the application stage you set for each one, and jobs you mark as not for you.
• Technical and usage data:limited technical information necessary to run the Service securely, such as authentication cookies, basic request logs and aggregate, cookieless page-view statistics. See “Cookies” below.

You can browse and search jobs without an account; we only collect account data if you sign up to save jobs.

Data from retired features. Until 14 October 2026 Morganson also offered AI features (a chat assistant, CV and cover-letter tools, salary checks, job-alert digests and paid credits). Those features have been withdrawn. If you used them, the data they stored (such as uploaded CVs, chat history, saved notes and alert preferences) remains in our database, but it is no longer used, processed or shared with anyone. You can ask us to delete it at any time (see section 8).

3. How and why we use your personal data (legal bases)

Under UK GDPR we must have a lawful basis for each use of your personal data. We rely on the following:

• To provide the Service (contract): creating and maintaining your account and storing the jobs you save and their application stages. This processing is necessary to perform our contract with you.
• To keep the Service secure and improve it (legitimate interests): preventing fraud and abuse, debugging, maintaining security, and understanding aggregate usage. We balance these interests against your rights.
• To comply with the law (legal obligation): for example keeping records required for tax and accounting, and responding to lawful requests.

4. Who we share your personal data with

We do not sell your personal data. We share it only with the service providers (“processors”) that enable us to run Morganson, and only as needed:

• Supabase: database and authentication. Your account and saved jobs are stored here. Our database is hosted in the European Union (Central region).
• Resend: delivery of account emails.
• Google:sign-in, if you choose “Continue with Google”.
• Vercel: hosting and serving of the website, and cookieless aggregate page-view statistics.

Each processor may only use your data on our instructions and under a data processing agreement. We may also disclose personal data where required by law, to protect our legal rights, or in connection with a sale or restructuring of the business.

5. International data transfers

Our primary database is hosted in the European Union. However, some of our processors (including Vercel and Google) may process data outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or adequacy regulations — to ensure your data remains protected.

6. How long we keep your data

We keep your personal data for as long as your account is active, so that we can provide the Service to you. If you delete your account (see below), we delete the personal data associated with it, except where we are required to retain limited records for legal, tax or accounting purposes, or to resolve disputes and enforce our agreements. Backups are cycled and overwritten in the ordinary course.

7. Your rights

Under UK data protection law you have the following rights in relation to your personal data:

• the right to be informed about how we use your data;
• the right of access to a copy of the data we hold about you;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure (“the right to be forgotten”);
• the right to restrict processing in certain circumstances;
• the right to data portability;
• the right to object to processing based on our legitimate interests, and to object to direct marketing at any time;
• the right to withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at hello@morganson.co. We will respond within one month. Exercising your rights is free of charge in most cases.

8. Deleting your account and data

You can request deletion of your account at any time by emailing hello@morganson.co. When your account is deleted, the personal data linked to it — including your saved jobs and any data left from retired features, such as uploaded CVs, chat history and notes — is removed from our live database.

9. Cookies

Morganson uses only strictly necessary cookies. Specifically, we use authentication cookies set by Supabase to keep you securely signed in. We do not use advertising cookies, third-party tracking cookies or non-essential analytics cookies. Because we use only strictly necessary cookies, no cookie-consent banner is required; you can control or clear cookies through your browser settings, though doing so may prevent you from staying signed in.

10. How we protect your data

We take appropriate technical and organisational measures to protect your personal data, including encryption of data in transit, hashing of passwords, access controls, and reputable infrastructure providers. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

11. Children

The Service is not intended for anyone under the age of 18, and we do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Effective” date at the top and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at hello@morganson.coso we can try to resolve them. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk.