Privacy
Draft, pending legal review. It describes how Morning Desk works today.
Who we are
Morning Desk is run by Vertical AI Inc. ("we"). We build it for licensed stockbrokers, wealth advisers and their firms ("you"). Contact us about privacy at jamesfox@verticalinc.ai.
Two kinds of information
- About you and your team: your name, work email, firm, sign-in method and how you use the desk. We are responsible for this information.
- About your clients: client names, holdings, contact details, notes, call notes and messages that you put into the desk. Your firm controls this information and decides what goes in; we hold and process it only to provide the desk to you.
What we collect and why
- Account details, so you can sign in and so we can manage your firm's subscription.
- Client books and notes you add or import, so the desk can work out what matters to each client.
- Questions, drafts, checks, sign-offs and call notes, kept in each client's file as a record your licensee can rely on.
- Voice: when you talk to the desk, the audio is processed to answer you. We do not keep recordings of your voice, and the desk does not record phone calls.
- Basic technical logs (time, page, errors) to keep the service running and secure. We do not use advertising or tracking cookies; the only cookie is the one that keeps you signed in.
Where it is stored
Your firm's data is stored on Google Cloud in Sydney, Australia, and kept separate from every other firm's. The AI features run on Google's Gemini models through Google Cloud. Some processing, including voice, may happen in Google data centres outside Australia, such as the United States. Under Google Cloud's terms for these services, Google does not use your data to train its models, and neither do we.
Who we share it with
- Google Cloud, which hosts the service and runs the AI models.
- Stripe, for billing (card details go to Stripe, never to us).
- Resend, which sends sign-in emails.
- Anyone the law requires us to, after checking the request is valid.
We do not sell personal information. When the desk researches a topic overnight, client names are kept out of the research request.
How long we keep it
While your firm uses the desk, we keep client files for as long as your licensee needs them; advice records are commonly kept for seven years. If your firm leaves, we return or delete its data on request, except where the law requires us to keep it.
Security
Data is encrypted in transit and at rest. Access is limited to signed-in members of your firm, sign-in links work once and expire, and secrets are held in Google Secret Manager. No system is perfectly secure; if a breach is likely to cause serious harm we will tell affected firms and, where required, the Office of the Australian Information Commissioner.
Your choices
You can ask to see or correct information we hold about you, or ask us to delete it. For information about a client, the client should contact their adviser's firm, which controls it. If you are unhappy with how we handle a privacy matter, contact us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
We will update this page when the service changes and tell firms about significant changes before they take effect.