Privacy Policy

At Morpheus Mark, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our AI-powered trademark enforcement platform.

As a legal technology service operating in the trademark enforcement domain, we handle sensitive information with the utmost care and comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

The data controller responsible for your personal information is:

3.1 WhatsApp Inquiry Data

When you submit an inquiry via WhatsApp, we collect:

• WhatsApp phone number
• Your inquiry message content
• Timestamp of your request
• Any additional information you voluntarily provide

3.2 Portal Authentication Data

For client portal access, we collect:

• Email address and password
• Two-factor authentication codes
• Login timestamps and IP addresses
• Session information and authentication tokens

3.3 Trademark Enforcement Data

As part of our trademark enforcement services, we process:

• Trademark registration details and documentation
• Evidence of trademark infringement
• Seller and marketplace information
• Legal case files and correspondence
• Settlement agreement details
• Payment information for settlements

3.4 Technical Data

We automatically collect certain technical information:

• IP address and geolocation data
• Browser type and operating system
• Device information
• Pages visited and time spent on our platform
• Referral source

We process your personal data based on the following legal bases:

• Legitimate Interest: Monitoring marketplaces for trademark infringements and providing legal protection services.
• Contractual Necessity: Providing trademark enforcement services under our client agreements.
• Legal Obligation: Complying with legal requirements for evidence preservation and court proceedings.
• Consent: When you voluntarily provide information through our contact forms or WhatsApp inquiries.
• Vital Interests: In emergency situations requiring immediate action to prevent serious harm.

5.1 Right to Access

You have the right to request access to your personal data that we hold, including information about how we process it and who we share it with.

5.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

5.3 Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements for evidence and compliance purposes.

5.4 Right to Restrict Processing

You can request that we limit the processing of your personal data in certain circumstances.

5.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format.

5.6 Right to Object

You can object to processing of your personal data based on legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing.

We implement robust security measures to protect your personal data:

We use a privacy-first approach to cookies and tracking technologies:

7.1 Essential Cookies

• Authentication tokens for secure portal access
• Session management and security features
• Language and preference settings

7.2 Audience measurement — always on, without cookies

We measure how our pages are used with Plausible Analytics, which we host ourselves on our own server in Frankfurt am Main, Germany. Plausible sets no cookies and assigns no identifier that recognises you across visits; your IP address is not stored, but combined with a daily-changing random value into a hash that cannot be reversed and becomes meaningless after 24 hours. The measurement data never leaves our server and is not passed to any analytics provider. Legal basis: Art. 6(1)(f) GDPR. Consent under § 25 TDDDG is not required because nothing is stored on or read from your device. You may object under Art. 21 GDPR.

7.3 Advertising measurement — only with your consent

If you accept in the consent dialog, we additionally load the Google Ads conversion tag (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). Both set cookies and recognise whether a click on one of our ads led to a visit here. Both providers build a profile of your behaviour and link it to data they already hold; if you are signed in with them, this visit can be attributed to your account. We have no influence over how far that linking goes.

Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR — your consent, and nothing else. Third-country transfers: both providers also process data in the United States, on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework. Retention: cookie lifetimes are set by Google and LinkedIn, not by us; according to their own information they range from a few days to 24 months depending on the cookie. Their notices govern: Google and LinkedIn.

Your personal data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• EU-US Data Privacy Framework: Certified for EU-US data transfers
• Standard Contractual Clauses: EU-approved contractual provisions
• UK Extension: Recognized for UK-EU data transfers
• Binding Corporate Rules: Internal data protection policies

Our servers are located in secure data centers in the United States, Germany, and the United Kingdom, ensuring compliance with regional data protection requirements.

We retain personal data only as long as necessary for the purposes for which it was collected:

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or for other operational reasons. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to our clients
• Displaying prominent notices in the client portal
• Updating the "Last updated" date at the top of this policy

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer: