Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains how MortonApps LLC (“MortonApps,” “we,” “us”) collects, uses, and protects information in connection with our corporate website at mortonapps.com (the “Site”). MortonApps is a software company based in California that builds three product lines: Morton Command Center for managed service providers, Morton Growth for local businesses, and Hospice Apps, a growing family for care teams that today includes Volunteer Ledger and Care Roster. Volunteer Ledger is also used outside care, by museums and other volunteer-run organizations.

This policy covers the corporate Site only. Each product is operated on its own domain and has its own privacy terms governing the data processed there. If you are a customer of, or visitor to, one of those products, please refer to the privacy policy published on that product’s own site.

1. Information We Collect

The Site is a marketing site. It has no user accounts, no login, and no payment processing. The only way you provide personal information to us through the Site is by submitting our contact form. When you do, you provide:

• Your name
• Your email address
• The free-text message you type describing how we can help

Sent with the form. When you submit the form, it also sends us the full web address of the page you sent it from, including anything after a “?” in that address (such as campaign tags), that page’s title, the note of how you arrived (described below), your approximate location (country and state), your browser’s user-agent string (which names your browser, its version, and your operating system), how long the form was open before you sent it (to help spot bots), and a scrambled form of your IP address that helps us block spam.

Bot check. Pages with our contact form also load Cloudflare Turnstile, a bot check that runs when the page opens, whether or not you use the form. It receives your IP address and technical details about your browser and device under Cloudflare’s own privacy terms. When you submit the form, our form service also sends your IP address to Cloudflare to confirm the check.

How you found us. Our own small script keeps a note in your browser (in local storage, not a cookie) of how you first arrived at the Site: the first page you visited, the website that sent you (if any), and any campaign tags in the link you followed. It ignores the note after 30 days. The note holds no visitor ID, and it leaves your browser only when you submit our form or tap or click an email or phone link on the Site.

Email and phone links. When you tap or click an email address or phone number link on the Site, that script tells us which link it was, the page it was on, the note of how you arrived, and your approximate location (country and state), without your name or contact details.

2. How We Use Information

We use the information described above to:

• Respond to your inquiry and follow up about your message
• Point you to the product (Morton Command Center, Morton Growth, or a Hospice Apps product) that fits your needs
• Operate, maintain, secure, and improve the Site
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with our legal obligations

We do not sell, rent, or trade your personal information. We do not use it for targeted advertising, and we do not use it to train artificial-intelligence models (except as Section 4 describes).

3. Cookies, Local Storage, and Analytics

We do not use advertising cookies, and we do not track you across other websites. The Site uses:

• Cloudflare Web Analytics, which counts visits without cookies and does not identify or follow individual visitors, so we can see which pages people use.
• Our note of how you found us, kept in local storage as described in Section 1.
• Cloudflare Turnstile, the bot check described in Section 1.

Cloudflare receives your IP address and browser details when your browser contacts it, as on other websites that use its services, and handles that information under its own privacy terms. Cloudflare may also set a security cookie if it needs to check whether your browser is automated.

You can delete the note at any time by clearing this Site’s data in your browser. Blocking cookies or local storage will not stop you from using the Site; if the form will not send from your browser, email us instead. The Site does not respond to browser Do Not Track signals.

4. Subprocessors

As of the date of this policy, we use these third-party providers to operate the Site and handle your form submission:

When you submit the contact form, MortonApps’ own form service records it, copies it to our internal sales records, and emails it to us through our own email-sending service. We may add or change subprocessors over time; this page will be updated to reflect material changes.

5. How We Share Information

We do not sell, rent, or trade your personal information. We share it only in these limited circumstances:

• With our subprocessors, listed above, to provide, maintain, secure, improve, and support the Site and to deliver and respond to your inquiry. Anthropic may also use what it receives as its own terms allow, as Section 4 explains.
• With Cloudflare, whose services your browser contacts directly when it loads our pages, as described in Section 3
• With people and service providers who help us run our business (for example, our sales representative, attorney, or accountant) under confidentiality obligations
• To comply with the law when we receive a valid legal request
• To protect rights and safety of MortonApps, our customers, or the public
• In connection with a corporate transaction such as a merger or acquisition, with the same protections we provide today

6. Data Retention

We keep contact-form submissions so we can follow up on your inquiry and keep a record of our conversation. Our form service and our internal sales records are set to delete each submission automatically 24 months after we receive it. Our email-sending service deletes the content of each email it sends us about a submission, including a daily summary of submissions our spam filter held for review, 30 days after sending; after that it keeps only a sending record. If you become a client, we keep records of our business relationship (such as agreements, invoices, and our correspondence) for as long as the relationship and our legal, tax, and accounting obligations require.

Some copies can last longer. Each submission is also emailed to our business email, where the emailed copies are not deleted automatically. We also keep encrypted backups of our databases: daily backups expire after about 90 days, monthly archive copies are kept for up to 12 months, and our database provider keeps a 30-day restore history. Copies of files stored in our services (such as attachments and bug-report screenshots) are also kept in our backup storage until we remove them after the original is deleted. Backups of our working computer, which can include records of and notes from AI sessions and other working copies, are kept in Google Drive for up to about 13 months. A deleted submission can remain in any of these backups, which we use only to restore lost or damaged data and to test that restoring works. When we use our AI tools on a submission or an email, Anthropic keeps that conversation for 30 days after the session ends (for a session we open on or connect to claude.ai, until 30 days after we delete it there), or up to 2 years if its safety systems flag it, and longer where the law requires. Our AI tool’s transcript of each session on our computer is deleted about 30 days after the session is last used. The tool’s log of the requests we type to it, its replies relayed to us through Telegram (which stay in that chat, and in our copy of them, until we clear them), and notes we make from a session are kept with our other business records.

If you ask us to delete your information, we will delete your submission from our form service, sales records, and email-sending service and any notes we made from an AI session, and take reasonable steps to delete the emailed copies, unless we need to keep something for a legal, tax, or security reason. Anthropic’s copy expires on the schedule above. We do not edit backups, so a copy can remain in a backup until that backup expires; if we ever restore from one, we will delete your submission again.

Records of email or phone link taps and clicks, which carry no name or contact details, are kept as marketing records. Standard server log data is kept on a rolling basis under our providers’ defaults.

7. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access: request a copy of the information we hold about you
• Correction: ask us to correct inaccurate or incomplete information
• Deletion: ask us to delete information we hold about you, subject to legal exceptions
• Restriction or objection: ask us to limit how we process your information
• Portability: request a copy of your information in a portable format
• Withdraw consent: where we rely on consent as our legal basis

To exercise any of these rights, contact us using the details in Section 11 below. We will respond within a reasonable time and in accordance with applicable law, and we do not discriminate against you for exercising any of these rights.

If you are a California resident, California law may give you the right to know what categories of personal information we collect and to access, correct, and delete it. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

8. International Data Transfers

MortonApps is based in the United States, and our subprocessors are US-based companies except Telegram, which is based outside the United States. If you contact us from outside the United States, your information will be transferred to, stored in, and processed in the United States, and some of our subprocessors may also process it in other countries, as Section 4 notes. By submitting the form, you understand your information will be handled as this policy describes.

9. Security

We take reasonable and appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, and destruction. These include encryption in transit (TLS), access controls, and the principle of least privilege. No system is perfectly secure, but if we ever experience a security incident affecting your personal information, we will notify affected parties as required by applicable law.

10. Children’s Privacy

The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise any of the rights described above, or have a complaint, contact us at:

MortonApps LLC
Privacy & Data Inquiries
Email: legal@mortonapps.com

For general questions, you can reach us at info@mortonapps.com.

Please don’t email us confidential or sensitive information, such as passwords, account credentials or personal records. If you send it anyway, we’ll keep it confidential and delete it when we no longer need it.