Privacy & local data

Updated 28 October 2026 · Public portfolio demonstration

Morrow helps you draft survey questions using AI. Use general or fictional topics. Do not enter personal details, confidential material, health information or other sensitive data. This demonstration is not a respondent research service or a tool for decisions about people.

What goes where

AI requests: on the landing page, pausing for about a second after typing a topic sends it to our server and Groq for question ideas. Find questions / Try again can also request them. Creating a survey sends your selected aim and original topic. Comparing versions when no alternative exists, or requesting clearer wording, sends your survey aim and the question text being improved, which can include the full draft in the older interface. Selecting “Analyze this survey” or “Analyze this section” in Insights sends the aim and the questions, section titles, answer formats and choices in the selected view to Groq for an optional design analysis. This does not send respondent answers or change your draft. Short inputs and common contact details or secrets are screened in the current browser before the request; this does not detect all personal data.
Your draft: questions, edits, review history, a reset backup and view preferences are saved in this browser’s local storage. A generation handoff also uses tab session storage. Other people using the same browser profile can access this data.
Preview answers: practice answers stay in the current preview’s memory. Morrow does not submit them to a respondent database.
Abuse prevention: before an AI request, Vercel BotID Basic runs a browser challenge and verifies technical browser and request signals with Vercel. Failed verification stops the AI request. This is used to protect this public demo, not for advertising or cross-site tracking.
Hosting: Vercel receives connection metadata such as IP address, request path and technical request information to deliver and protect the service. Our AI handler logs bounded error metadata, not prompt or answer text. Temporary abuse counters do not store raw IP addresses.

AI provider and international processing

Groq processes the text needed for the AI feature. Its documentation says inference content is not retained by default, but reliability or abuse logs can retain content for up to 30 days unless Zero Data Retention is enabled. Retained customer data is located in the United States. Inference APIs Zero Data Retention was enabled in the operator’s Groq account when checked on 28 October 2026. Usage metadata is still retained. We do not claim EU-only processing. See Groq’s data policy and Vercel’s privacy policy.

Retention and deletion

Local Morrow data is cleared on your next visit after 30 days without a visit. Until you return, your browser can retain it; you can remove it at any time below or using browser settings. This also removes reset and unreadable-draft recovery copies. Clearing this browser cannot delete provider logs, browser history, clipboard copies or links held by other people.

Public AI allowance

A private Vercel store in Frankfurt keeps aggregate request and reserved-output counters to limit public AI usage across server instances. It contains no topics, questions, answers, IP addresses or visitor identifiers. The current and most recently used time buckets are overwritten as requests arrive. If the allowance cannot be checked, AI pauses; saved drafts and previews remain available. Contact and secret screening is a precaution, not a guarantee that all personal information can be recognized.

Shared links are public copies

A preview link contains the survey itself in readable, encoded form. Anyone who receives it can read, copy and change their copy. Links are not encrypted, authenticated, revocable or expiring. Never share confidential or personal information. Deleting a local draft does not invalidate an existing link.

Purpose and legal basis

We rely on legitimate interests (GDPR Article 6(1)(f)) for the limited processing needed to deliver the demonstration you choose to use and protect it from abuse. These interests are demonstrating Miguel Almeida’s work, providing requested AI drafting and keeping the public demo available. Our assessment limits this use to general or fictional content, clearly disclosed AI suggestions and requested drafts, minimal technical records and no respondent collection, advertising or behavioural profiling. This does not authorize processing sensitive personal information.

The application adds no advertising or optional analytics. Browser storage supports your saved draft, recovery and selected view; it is not used to track you across websites. Necessary storage for a service you expressly request is addressed by § 25(2)(2) TDDDG. Providing a topic is optional; AI drafting requires sending the topic you choose. Visiting the service necessarily involves connection metadata.

Privacy requests

You can request access, correction, deletion or restriction, object to processing based on legitimate interests, and request portability where its legal conditions apply. Requests are normally free, and we respond without undue delay, normally within one month. You may complain to a data-protection authority, including in the country of your residence, work or the alleged infringement.

miguelalmeida1592@gmail.com is the contact for requests in English, German or Portuguese. Describe what you need and, if relevant, the approximate time you used the demo. Do not send passwords, identity documents or sensitive survey content. No special subject or form is required.

For a saved draft, you can delete this browser’s data immediately. We cannot remotely retrieve a draft stored only in your browser. For an AI request or hosting record, we investigate the data actually available and seek provider assistance where needed. A local deletion does not erase provider records or copies others hold. Request correspondence is handled in Gmail and used to answer the request and document its handling, under GDPR Article 6(1)(c) where required to fulfil your rights. Correspondence is reviewed for deletion six months after closure unless an unresolved complaint or legal obligation requires longer retention.

Provider arrangements

Groq’s data-processing addendum forms part of its services agreement and includes standard contractual clauses for applicable international transfers. Vercel describes itself as a controller for its own service-generated metadata. Its Terms incorporate a DPA, but the published DPA expressly limits processor coverage to Pro and Enterprise. Coverage for this Hobby deployment’s processing of submitted content remains unresolved. We do not present this demo as approved for personal-data research. Optional Vercel model-training sharing for this project was disabled on 28 October 2026.

Impressum / operator

Responsible for this demonstration: Miguel Almeida.
Operating country: Germany.
Postal contact address supplied by the operator:
Travessa da Gateira n.º 3
6090-473 Pedrógão de São Pedro
Portugal

Email: miguelalmeida1592@gmail.com. This is a free personal portfolio demonstration with no paid subscriptions or respondent collection.

AI transparency

Suggestions and initial drafts are AI-generated and may be inaccurate or biased. You choose, edit and approve what stays. Approval does not certify legal, ethical or scientific suitability. Shared previews identify the AI-assisted workflow; no decisions about respondents are made here.