How Morika handles your information.

Morika is an AI agent systems business operated by Arturas Kateiva in Lithuania. We design, configure, and operate AI agents that perform business work across software, data, files, communications, and other connected tools.

For personal data covered by this policy, Arturas Kateiva, operating as Morika, is the data controller. You can contact us at [email protected].

This policy covers morika.studio, business inquiries, consultations, proposals, and Morika’s client relationships. It does not automatically govern a client’s own AI agent installation or the personal data a client chooses to process through it.

For client systems, the applicable contract and data-processing terms determine the parties’ roles, approved purposes, security controls, service providers, and retention rules. Depending on the engagement, Morika may act as a processor on the client’s documented instructions.

The personal data we receive depends on how you interact with Morika. It may include:

• Contact and professional details, such as your name, email address, organisation, role, and message.
• Information you provide in emails, calls, consultations, proposals, contracts, support requests, and project work.
• Billing, transaction, and business-record information when you become a client.
• Website and device data, including IP address, browser and device information, page URL, referring information, cookie identifiers, and security or server logs.

Please do not send sensitive or confidential information before we have agreed on an appropriate channel and purpose.

We process personal data only when we have a lawful basis. Depending on the situation, we use it to:

• Respond to inquiries, prepare proposals, and take steps before entering a contract.
• Provide consultations, build and operate agreed systems, communicate with clients, and administer contracts.
• Issue invoices, keep accounting records, and meet tax or other legal obligations.
• Protect the website, systems, clients, and Morika against abuse, fraud, and security threats based on our legitimate interests.
• Measure advertising and website activity where consent is required or another lawful basis is available.
• Establish, exercise, or defend legal claims where necessary.

We do not sell personal data.

Cloudflare Pages delivers and protects this website. Cloudflare may process IP addresses, request information, security signals, and logs. You can read the Cloudflare Privacy Policy.

The site uses Meta Pixel and the Meta Conversions API for advertising measurement. Events may include the page visited, source URL, time, IP address, browser or device information, and Meta cookie identifiers. You can read the Meta Privacy Policy.

Fonts are requested from Google Fonts when a page loads. The request may disclose technical information such as your IP address and browser details to Google. You can read the Google Privacy Policy.

Meta advertising technology may use _fbp and _fbc cookies to recognise a browser and attribute visits. Cloudflare may use strictly necessary technologies to deliver and secure the website.

The site also stores your selected appearance theme in your browser’s local storage. This preference stays on your device and is not used to identify you.

You can delete or block cookies and local storage through your browser settings. Blocking some technologies may affect website functionality or measurement.

Morika AI agents may be connected to a client’s software, files, accounts, databases, communications, or other systems only within the agreed scope. Access, permissions, approvals, storage, model providers, and deployment location depend on the client’s chosen architecture and contract.

We apply data minimisation and least-privilege principles: agents should receive only the access and information needed for approved work. Where appropriate, systems can be separated, self-hosted, sandboxed, or tested with synthetic or anonymised data before production use.

Morika does not use one client’s confidential data to serve another client. More detailed processing, security, deletion, and incident obligations should be recorded in the client agreement or data processing agreement where required.

We disclose personal data only when necessary for the purposes described above. Recipients may include website and infrastructure providers, communications and productivity providers, accounting or professional advisers, AI model or software providers approved for a client engagement, and public authorities where disclosure is legally required.

The providers used for a client system are not fixed. They depend on the design approved by that client and should be documented for the engagement. We do not give third parties permission to use client confidential data for their own unrelated purposes.

Some service providers may process data outside Lithuania or the European Economic Area. Where EU data-protection law applies, transfers must rely on an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.

For client deployments, provider location and transfer requirements depend on the services selected with the client.

We retain personal data only as long as necessary for the purpose for which it was collected. The period depends on the type of information, the relationship, legal requirements, security needs, and whether the information is needed to establish or defend a claim.

Inquiry and proposal information is reviewed when it is no longer needed. Client, contract, invoice, and accounting records may be retained for the periods required by Lithuanian law. Website logs, cookies, and data held by service providers follow the relevant security, configuration, and provider retention periods.

Where the GDPR applies, you may have the right to access, correct, erase, or receive your personal data; restrict or object to processing; and withdraw consent at any time where processing relies on consent. Withdrawal does not affect processing that was lawful before it.

Some rights are subject to legal conditions and exceptions. To make a request, email [email protected]. We may need to verify your identity. You may also complain to the Lithuanian State Data Protection Inspectorate or another competent supervisory authority.

For privacy questions, requests, or concerns, contact the controller:

Arturas Kateiva, operating as Morika
Lithuania

We may update this policy when Morika’s website, services, providers, or legal obligations change. Material changes will be reflected on this page, and the effective date above shows when the current version took effect.