Privacy Policy

Last updated: October 27, 2026

1. Controller

Marx Media, Dominic Marx, Ulmergasse 16, 89073 Ulm, Germany. Contact: hey@marx-media.net.

2. What the service does

Morphy Reels is an internal tool of the Morphy team. It publishes videos to TikTok accounts that team members connect themselves. It does not process data of other TikTok users.

3. Data from TikTok

When you connect a TikTok account, the service receives and stores:

• your TikTok open ID, display name and avatar URL (scope user.info.basic),
• the access token and refresh token that TikTok issues, and the granted scopes,
• creator settings that TikTok returns before a post, for example the allowed privacy levels.

The service uses this data only to show which account is connected and to upload and publish videos you submit (scopes video.upload and video.publish).

4. Videos and captions

Videos you upload pass through the service to TikTok. The service stores a video file only temporarily while it transfers the file to TikTok and deletes it right after the transfer. Captions and post settings go to TikTok and are not stored by the service.

5. Server logs

The hosting server records technical access data, such as IP address, time and requested URL, to operate and secure the service. Logs are deleted after 14 days at the latest.

6. Legal basis

Processing is based on Art. 6(1)(b) GDPR to provide the service you request, and on Art. 6(1)(f) GDPR for secure operation.

7. Sharing

The service shares data only with TikTok, to perform the actions you start. Hosting runs on servers of Hetzner Online GmbH in Germany under a data processing agreement. The service does not sell data and does not use it for advertising.

8. Retention and deletion

Tokens and profile data stay stored until you disconnect the account in the dashboard. Disconnecting revokes the token at TikTok and deletes the stored account data. You can also revoke access in the TikTok app under Settings and privacy, Security, Apps and services, or ask for deletion by email.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can also lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg.