Privacy Policy

Last updated: November 6, 2025

1. Introduction

Milo ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email outreach platform and services.

By using Milo, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, and other registration details when you create an account
  • Campaign Data: Campaign names, email templates, lead information, and campaign settings
  • Email Content: Email templates, subject lines, and content you create through our platform
  • Lead Information: Contact details, names, email addresses, and other information about your leads
  • Payment Information: Billing address and payment details processed through our third-party payment processor (Stripe)

2.2 Automatically Collected Information

When you use our service, we automatically collect certain information, including:

  • Usage Data: Information about how you interact with our service, including pages visited, features used, and time spent
  • Log Data: IP addresses, browser type, device information, operating system, and access times
  • Email Account Data: When you connect your email account, we access email metadata necessary for sending emails and tracking replies
  • Campaign Analytics: Email open rates, click-through rates, reply rates, and other campaign performance metrics

2.3 Third-Party Information

We may receive information from third-party services you connect to Milo:

  • Email Providers: When you connect Gmail or Outlook, we access your email account with your permission
  • Authentication Services: We use Clerk for authentication, which may provide us with basic profile information

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process and manage your email campaigns
  • Send emails on your behalf through your connected email accounts
  • Track email opens, clicks, and replies
  • Process payments and manage subscriptions
  • Send you service-related communications, including updates, security alerts, and support messages
  • Respond to your inquiries and provide customer support
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our Terms of Service
  • Analyze usage patterns to improve our service and user experience

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

  • Hosting and Infrastructure: Vercel, Supabase for hosting and database services
  • Payment Processing: Stripe for processing subscription payments
  • Authentication: Clerk for user authentication and management
  • Email Services: Gmail API and Microsoft Graph API for sending emails

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may share your information with your explicit consent or at your direction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS
  • Secure storage of authentication tokens and credentials
  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Secure database hosting through Supabase

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our services. We may retain certain information for longer periods as required by law or for legitimate business purposes, such as:

  • Compliance with legal obligations
  • Resolution of disputes
  • Enforcement of our agreements
  • Historical analytics and service improvement

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Correction

You can access and update your account information at any time through your account settings.

7.2 Data Portability

You can export your campaign data and lead information through our service interface.

7.3 Deletion

You can delete your account and associated data at any time through your account settings or by contacting us.

7.4 Email Account Connection

You can disconnect your email account at any time through the settings page, which will revoke our access to your email account.

7.5 Opt-Out

You can opt out of non-essential communications by adjusting your notification preferences or contacting us.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

By using our service, you consent to the transfer of your information to facilities located outside your jurisdiction.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We will also notify you of any material changes via email or through a prominent notice on our service. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@milomails.com
Address: [Your Company Address]

For users in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority.