Morrowset

Privacy Policy

Last updated: October 23, 2026

1. Overview

This policy describes what Morrowset (the “Service”), operated by its individual owner (the “Operator”), collects about you and how it is used. The Service is an invite-only beta for event planners and designers; this policy aims to reflect what the product actually does today, not boilerplate.

2. What we collect

  • Account information — your email address, your name (a first name, and a last name if you give one), and a hashed version of your password (the password itself is never stored).
  • Content you create — images you upload, the projects, events, looks, and lookbooks you assemble, the design descriptions you write, and the AI-generated mockup images produced for you.
  • Usage data — product analytics about how the Service is used (pages visited, features used, and basic device/browser information). Where browser analytics is on (see Cookies), your browser also sends this to PostHog directly: the pages you visit and the buttons and links you click, with their on-screen text and labels hidden, plus errors that occur in the page. Once you sign in, this activity is linked to your account ID.
  • Newsletter sign-ups — the email address you enter if you sign up for the Morrowset newsletter on our homepage, and whether you chose to receive the newsletter and getting-started tips when creating your account or in Settings. Signing up on the homepage does not create an account.
  • Technical logs — request metadata such as IP address and error details, used for security (e.g. rate limiting) and debugging.

3. How we use it

Your data is used to operate the Service (generate mockups, assemble and serve lookbooks), to secure it (abuse prevention, rate limiting), to improve it (aggregate usage analytics), and to send you transactional account email such as password resets. If you sign up for the newsletter and confirm it, your address is also used to send you the newsletter, and, if you opted in from your account, a few emails with tips for getting started. There is no advertising and your data is never sold.

4. AI image generation

When you generate a mockup, your written description, the images you selected for that look — including any images you uploaded — and the names you gave those uploads are transmitted to a third-party AI image service (Google Gemini or OpenAI) to produce the mockup. These processors handle that data under their own terms to fulfill the request. The generated images are stored in the Service’s media storage as part of your account.

5. Third-party processors

The Service runs on the following third-party processors:

  • Google (Gemini) and OpenAI — AI image generation, as described above. Gemini also computes the text embeddings behind asset suggestions: short text derived from your event’s theme, style, and notes is sent to Google’s embedding API to find matching catalog assets.
  • Render — application hosting; Neon — database hosting; Cloudflare R2 — media (image) storage.
  • PostHog — product analytics and error tracking. When the Service hits an unexpected error, PostHog receives the error’s type, the first line of its message, and where in the Service’s code it occurred. Where browser analytics is on, PostHog also receives usage and error reports directly from your browser.
  • Postmark — transactional email delivery. Postmark retains message metadata and full message content for about 45 days, including any links those emails contain; account-security links (such as password resets) are short-lived and single-use, so a retained link expires long before that window ends.
  • MailerLite — newsletter email. If you sign up for the newsletter, your email address is sent to MailerLite, which emails you a link to confirm the sign-up and, once you confirm, sends the newsletter. MailerLite records when you signed up and confirmed, and may record whether a newsletter is opened and which of its links are clicked. Every newsletter has an unsubscribe link; unsubscribing never stops account email such as password resets. If you opt in from your account (a box when you create it, or a switch in Settings), MailerLite receives your account’s email address and first name once you can sign in, so the emails can greet you by name, and later the date of your first mockup. You can turn this off in Settings at any time.
  • GitHub — in-app feedback handling. When you submit feedback through the Service, your message is filed in the Operator’s private issue tracker along with your name, email address, and technical context (the page you were on, browser details, recent errors) so the Operator can follow up.

6. Cookies

The Service uses essential cookies to keep you signed in, plus a scoped cookie to serve images for password-protected shared lookbooks. Where browser analytics is on, PostHog also stores an analytics cookie and browser storage to recognize repeat visits and link your activity to your account; they are never used for advertising. Browser analytics is never turned on for visitors from the European Union, the European Economic Area, the United Kingdom or Switzerland, or when your region cannot be determined, and never on shared lookbook pages, whoever views them. The Service may also use PostHog session recording — a replay of how pages were used, with the text you type and the images you upload masked — to diagnose problems. Our public website, morrowset.com, uses PostHog to count page visits, button clicks, and how far visitors scroll, without cookies or any other identifier stored in your browser.

7. Sharing

Your content is private to your account. It leaves the Service only through the processors listed above and through the lookbook share links you create yourself — anyone with a share link (and its password, if you set one) can view that lookbook. Data may also be disclosed if required by law.

8. Retention and deletion

Your content is retained while your account is active. There is no self-serve deletion yet: to delete your account or specific content, contact the Operator (see Contact below) and the deletion will be handled for you. Routine database backups exist for disaster recovery, so deleted data may persist in backups for a limited period before aging out.

A newsletter address stays with MailerLite while you are subscribed. After you unsubscribe it is kept as an unsubscribed record, so you are not emailed again; contact the Operator to have it deleted entirely. If you ever opted in from your account, deleting the account also has MailerLite erase your address, within 30 days.

9. Security

Passwords are stored only as strong one-way hashes, media access is authenticated (uploads and mockups are never public files), and lookbook share links are private URLs with optional passwords. No online service can guarantee perfect security, but the Service is built so that your content is only reachable through your account or the share links you create.

10. Children

The Service is a professional tool and is not directed at children under 16. Do not use the Service if you are under 16.

11. Changes to this policy

This policy will be updated as the product changes — for example when a processor is added or replaced. Material changes will be communicated through the Service.

12. Contact

Privacy questions and deletion requests: use the in-app feedback tool, or reply to the invitation email you received for the beta.