Privacy & data
Last updated 19 October 2026. Draft: this page describes what the service does today and is pending review by the responsible policy owner before paid launch.
This page lists exactly what Mordial stores, where, and for how long. It is written from the implementation, not from a template.
What we store
- Account: the user id, email and display name from your identity provider (Firebase Authentication), and when you last signed in. We never see your password.
- Workspaces: names, members and roles, credit balances, storage usage and pack limits.
- Takes: your brief, chosen model and format, provider operation ids, the verified output file and its dimensions, cost estimates and timestamps.
- Assets: reference images you upload, their SHA-256 hash, size and your rights attestation.
- Payments: the product, amount, currency, our reference, the payment provider's transaction id and status. Card details never reach us; they go to Paystack.
- Support requests: your email, message and any take id or payment reference you include.
- Operator audit log: who resolved a stuck take, when, why, and the state before and after.
Where it lives
Records are stored in Amazon DynamoDB and files in a private Amazon S3 bucket, both in the AWS us-east-1 region, encrypted at rest. Files are downloaded only through links that expire after 15 minutes. Briefs and reference images are sent to the generation provider you chose (Google Veo via the Gemini API in production) to produce the take; see that provider's terms for its handling.
How long
- Output files and reference images: the retention period of your pack (30, 90 or 180 days), then automatic deletion. The expiry is shown on each item.
- Take records, ledger entries and payment records: kept for billing history and dispute handling.
- Logs: 30 days.
What we do not do
- We do not train models on your briefs, assets or outputs.
- We do not publish your outputs anywhere or share them across workspaces.
- We do not sell personal data.
Your choices
Delete an asset or workspace, or ask for account deletion, through support; include the workspace id shown on your receipt or in the address bar. We confirm completion by email.