1. Who we are and when this policy applies
Mill is operated by Mill Standard, Inc. (“Mill”, “we”, “us”), which is responsible for operating the service and the processing described in this policy. The Mill mobile app is published by Millcorn LLC. Millcorn LLC’s role as the app publisher does not change the service operator identified in this policy. This policy applies to mill.chat, app.mill.chat, the Mill mobile app, and Mill’s customer conversation services.
We manage account, billing, support and service-operation information for our own purposes. When a business uses Mill to communicate with its website visitors or customers, that business controls the information in its workspace and Mill processes it to provide the service on its behalf. If you contact a business through its Mill widget, its privacy notice also applies. Ask that business about its use of your information.
2. Information we collect
- Account and workspace information: your name, email address, account identifier, profile photo if provided, company details, membership, role and preferences. Authentication is handled through Supabase; passwords are not exposed to company operators.
- Conversation content: messages, selected photos and files, voice messages where supported, contact details supplied in chat, notes, saved replies, ratings and feedback. We also process delivery, read, assignment and conversation-status events.
- Website visitor information: session and visitor identifiers, IP address, approximate country and city derived from IP, browser and device information, pages or URLs supplied by the widget, visit times and online activity. IP-based location is approximate; the mobile app does not request the operator’s GPS location.
- Mobile service information: account and company identifiers, app and device information needed to operate the service, notification preferences, a push token and an installation identifier when push notifications are enabled. The app keeps local session information, settings, cached conversations and pending actions to support sign-in and responsive operation.
- Billing information: billing contact details, subscription, invoices, payment status and payment-provider references. Payment details are handled by our billing and payment providers through their payment flows.
- Support and technical information: information you send us, error and service logs, request metadata and security events needed to troubleshoot, prevent abuse and operate Mill.
We collect information you enter, information provided by your workspace or its visitors, and technical information generated when the services are used. Do not send sensitive personal information unless it is necessary and you have authority to share it.
Device permissions and notifications
The mobile app uses the system’s image picker for photos you choose to send; it does not need access to your entire photo library. The current iOS operator app does not request camera or microphone permission. Push notifications are optional and require device permission. Notifications contain service alerts and routing identifiers and, where a preview is enabled, may show message information. You can disable notifications or lock-screen previews in your device settings.
3. Why we use information
We use information to authenticate users, manage workspace access, deliver and display conversations, synchronize devices, provide requested notifications and emails, process billing, help customers, investigate errors, prevent fraud and abuse, and meet legal obligations.
Where data-protection law requires a legal basis, these activities rely on performing our agreement with you, our legitimate interests in operating and securing the service, legal obligations, or your consent for optional features where required. You may withdraw optional consent without losing unrelated core features.
The current Mill mobile operator app has no advertising or third-party advertising-tracking SDK. We do not sell personal information or use conversation content for targeted advertising.
Optional AI features
Where enabled for your subscription, message translation is optional. Before enabling translation, Mill asks the operator for explicit permission to send conversation message text and reply drafts to OpenAI. After permission, incoming messages may be translated automatically while originals remain visible. Operators can turn translation off and withdraw permission in translation settings. The original message remains unchanged. Translated text may be cached in Mill, and usage is counted against the subscription owner’s shared allowance across companies and operators. You can use core chat functions without enabling translation. Depending on the interface and selected mode, outgoing translations are either shown as a preview for review or translated when the operator presses Send. Mill does not send replies without an operator action.
5. Storage, security and international processing
Mill uses access controls, authenticated service requests and HTTPS connections. The native mobile app stores session and local service data using the device’s secure storage. No service can guarantee absolute security; please protect your sign-in details and review your company’s access permissions.
Our providers may process information in the United States and other countries where they operate. Data-protection rules may differ by country. Where required, international transfers must be covered by an applicable legal mechanism and safeguards.
Retention
Account and workspace information and conversation history are retained while needed to provide the service, maintain the workspace record, or meet legal, billing, security and dispute-resolution obligations. Ending a conversation or cancelling a subscription does not itself delete conversation history. Retention depends on the data category and the workspace’s instructions; we do not apply one universal deletion period to all data.
When information is deleted from active systems, backup copies and legally required records may remain for their applicable retention cycle. Where retention is required, access and use are restricted to the purpose requiring retention. Local app data is separate from server records; removing the app does not delete your account or company.
6. Your choices, rights and deletion requests
You can update available profile and workspace settings, control notification preferences, and revoke notification permission in your device settings. Browser cookies and local storage are used for sign-in, preferences and chat continuity. Clearing them may sign you out or break conversation continuity; it does not delete server-side records.
Depending on your location, you may have rights to access, correct, delete or obtain a copy of your personal information, restrict or object to processing, or withdraw consent. Contact support@mill.chat from your account email and describe the request. We may verify your identity before acting. You may also complain to your local data-protection authority.
Account deletion: you can initiate deletion from account settings in the Mill app, or directly in Account settings in the web portal. You must confirm your account email and verify your identity before deletion. Your login, profile and access are removed; personal companies with no other account holders are closed and their data and files are removed by background cleanup. Shared company conversations and business records remain controlled by that company and available to its authorized members. Deleting a company alone does not delete your login account. Ownership transfer and subscription renewal issues are explained before you confirm deletion. Legally required records and restricted backups may be retained as described above. Contact support if you need help or have a separate privacy request.
Website visitor requests: contact the business you spoke with first, as it controls the conversation records. We can help identify the relevant workspace or assist the business in handling a valid request.
7. Children
Mill’s operator services are designed for business use and are not directed to children. Businesses using our widget are responsible for appropriate notices, permissions and age-related requirements for their visitors. If you believe a child’s information has been provided inappropriately, contact us so we can review it.
8. Changes to this policy
We will update this page as our services and data practices change and revise the date above. Where a material change requires notice or consent, we will provide it before applying the relevant change.
9. Contact Mill
Service operator: Mill Standard, Inc.
Mobile app publisher: Millcorn LLC
support@mill.chat
mill.chat/support
For privacy, access or deletion requests, include “Privacy request” in the subject and identify the account or workspace concerned. Please do not email passwords, verification codes or full payment card details.