Privacy notice

Last updated 8 November 2026. This notice explains what Morvett collects when you use the website, dashboard, API or scanner app.

What we collect

Account details you provide (name, email, password hash), organisation and namespace information, product identities and datasets you create, scan events generated by the service, and contact messages you send us.

Why we use it

To operate your account and workspace, resolve identities, apply dataset access rules, maintain audit history, respond to enquiries and keep the service secure. We do not sell personal data.

Storage and security

Passwords are stored as scrypt hashes. Production traffic is served over HTTPS. Access tokens are held by the client and should be protected as credentials. Administrative actions and scan events are logged for audit purposes.

Your choices

You can request access, correction or deletion of your account data by emailing [email protected]. Some records may be retained where required for security or legal obligations.

Contact

Questions about this notice: [email protected].