Privacy Policy

Millo (“we”, “us”) is a design tool that lets you create, store, and collaborate on designs. This policy explains what personal data we collect, why, who we share it with, and the choices you have. By using Millo you agree to this policy.

• Account data — your name and email address when you sign up.
• Content — the designs, text, uploaded images, and brand assets you create or import.
• Collaboration data — comments, shares, workspace membership, and presence while editing.
• Billing data — subscription status and identifiers from our payment processor (we never store full card numbers).
• Usage & device data — basic logs (IP address, browser type, timestamps) used to run and secure the service.

• To provide the editor, store your designs, and sync collaboration.
• To authenticate you and keep your account secure.
• To process subscriptions and payments.
• To power AI features you choose to use (text and image generation).
• To send service and collaboration emails.
• To diagnose problems, prevent abuse, and improve the product.

We do not sell your personal data, and we do not use your private design content to train AI models.

We use a small number of essential cookies — for example, to keep you signed in and to secure your session. These are required for the service to function and cannot be turned off.

Any non-essential cookies (such as product analytics) are only set with your consent. You can choose “Essential only” in the cookie banner, and your choice is remembered on your device.

We share data with these processors only as needed to run Millo, under their respective data-processing terms:

• SupabaseDatabase, authentication, and file storage
• VercelApplication hosting and delivery
• StripeSubscription billing and payments
• OpenRouterAI text generation for the design assistant
• fal.aiAI image tools (background removal, upscaling, and similar)
• PexelsStock photo search
• ResendTransactional and collaboration emails

We keep your account and content for as long as your account is active. When you delete content or close your account, we remove it from our active systems; residual copies in backups are purged on a rolling schedule.

Depending on where you live (for example under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@millo.design.

Data is encrypted in transit, access is restricted by per-workspace authorization rules, and payment details are handled by our PCI-compliant payment processor. No system is perfectly secure, but we work to protect your data and to notify you of incidents where required by law.

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for those transfers.

Millo is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

We may update this policy; we’ll revise the “last updated” date above and, for material changes, notify you in-app or by email.

Questions about this policy or your data? Email privacy@millo.design.