Privacy Policy

Last updated: 13 August 2026

1. The short version

Morgano is operated by Excellutions CC. We store the minimum needed to run the service, we don't run trackers, we never sell or share your information, and you can erase everything yourself with two clicks.

2. What we store, and why

• Your email address — it is your account identity and where sign-in links go.
• The staff data you upload — names, roles and whatever columns your file contains. This is stored (compressed) so your chart is there when you sign in, and it exists solely to render your charts and documents. You are the custodian of this information for your organisation; we process it only on your instruction.
• Saved versions and share links you create — kept until you delete them or they expire.
• Ordinary server logs (IP address, request, time) — kept for 30 days for security and troubleshooting, then deleted.

3. What we don't do

• No analytics trackers, no advertising pixels, no third-party scripts anywhere on the site — our content-security policy blocks them outright.
• No selling, renting, or sharing of your information with anyone.
• No card details — payments happen entirely at PayPal or Paystack, never on our server.

4. Cookies

One cookie: your sign-in session. No tracking cookies.

5. Email

We send sign-in links you request and account notices (like a payment confirmation). Delivery is handled by Resend, our email provider, which processes the recipient address for that purpose. No marketing mail.

6. Who touches it

Four providers, and no others: our hosting provider runs our server (in South Africa), Resend delivers our email, and PayPal and Paystack handle payment. Resend sees your email address; PayPal or Paystack sees your payment. None of them ever receives your staff data.

7. Where it lives

On our server in South Africa, with routine backups kept for operational recovery. When you erase your account, your live data and saved versions are deleted and a block prevents old sessions from re-uploading them; backup copies age out of the backup cycle within two weeks.

8. Your controls

• Export everything at any time — CSV, PDF, PNG, SVG.
• Erase your account and all its data from the Account page (two clicks, permanent). One bookkeeping exception: records of payments keep their amounts and provider references — as any ledger must — but your identity is removed from them.
• Ask — for a copy, a correction, or anything else: support@morgano.app.

9. The legal frame

We process personal information in line with South Africa's Protection of Personal Information Act (POPIA). For the staff data you upload, your organisation is the responsible party and Morgano acts as its operator, processing only on your instructions. Resend processes email in the United States — sending your email address there is a cross-border transfer, permitted under section 72 of POPIA because it is necessary to deliver the sign-in links and notices you request, and Resend is bound by a data-processing agreement upholding comparable protection. If you think we have mishandled personal information, tell us first at support@morgano.app; you can also complain to South Africa's Information Regulator. Changes to this policy move the "last updated" date above.