Privacy Policy

1. Who We Are

This website is operated by:

2. What Data We Collect

When you use Get Content Plan, we collect:

• Email address - to deliver your content plan
• Business description - to generate personalized content
• Platform and package selection - to customize your plan

We do NOT collect or store:

• Cookies for tracking (unless you accept analytics cookies)
• Any data beyond what you voluntarily provide

3. How We Use Your Data

• To generate and deliver your content plan via email
• To respond to support requests
• To improve our service (aggregated, anonymized analytics)

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on the following legal grounds:

• Performance of a contract - Art. 6(1)(b): Processing your business description, generating content plans, and delivering them via email. This is necessary to provide the service you requested.
• Consent - Art. 6(1)(a): Analytics cookies (Google Analytics, Microsoft Clarity) are only activated with your explicit consent via the cookie banner. You may withdraw consent at any time.
• Legitimate interest - Art. 6(1)(f): Security measures, fraud prevention, and maintaining the technical integrity of our website.
• Legal obligations - Art. 6(1)(c): Processing required to comply with applicable legal obligations (e.g., tax, accounting).
• Consent - Art. 6(1)(a): Marketing communications, if any, are sent only with your explicit consent.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access (Art. 15) - see what data we have about you
• Rectification (Art. 16) - correct inaccurate data
• Erasure (Art. 17) - request deletion of your data ("right to be forgotten")
• Restriction (Art. 18) - limit how we process your data
• Portability (Art. 20) - receive your data in a machine-readable format
• Object (Art. 21) - object to processing based on legitimate interest
• Not be subject to automated decisions (Art. 22) - right not to be subject to a decision based solely on automated processing (including profiling) which produces legal or similarly significant effects. GetContentPlan uses AI for content plan generation, but decisions affecting users (e.g., pricing, service access) always involve human oversight.
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at contact@millai.eu.

You have the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl.

As a small business processing limited personal data, we are not required to appoint a Data Protection Officer (DPO) under GDPR Art. 37. For all data protection inquiries, please contact us at contact@millai.eu.

9. Cookies

We use the following types of cookies:

• Essential cookies: Consent preference stored in localStorage. Persistent until cleared by the user. Required for the website to function properly.
• Analytics cookies:
  • Google Analytics: _ga (2 years), _ga_* (2 years) - used to distinguish users and sessions.
  • Microsoft Clarity: _clck (1 year), _clsk (1 day) - used for session recording and heatmaps.
• Marketing/advertising cookies: We do not use any marketing or advertising cookies.

Google Tag Manager does not set cookies itself but manages the tags that do.

Analytics cookies are only activated with your explicit consent via the cookie banner. You can also manage cookies in your browser settings. For instructions, visit your browser's help pages (Chrome, Firefox, Safari, Edge).

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Mill AI newsletter

Our websites offer an optional signup for the Mill AI newsletter (practical notes for small business owners, at most twice a month). Subscribing is voluntary, separate from using the product, and uses double opt-in: we send a confirmation e-mail and only a confirmed address joins the list. The subscriber list is administered at the Mill AI portfolio level (contact@millai.eu) and stored on encrypted infrastructure in the EU (AWS, eu-central-1). Legal basis: consent (art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every issue or by writing to contact@millai.eu - withdrawal takes effect immediately.

Recipients, retention and transfers

Data required to operate the service may be disclosed to categories of providers responsible for hosting, result generation where applicable, delivery, customer support, security and consent-based analytics. Providers may process data only for documented purposes and under applicable contractual safeguards.

Generation records are kept for up to 90 days and request content for up to 24 hours. Other data is kept only as long as needed for delivery, security, support, legal duties or the exercise of claims.

Where data is transferred outside the EEA, we use an applicable transfer mechanism and supplementary safeguards where required.

Consent choices and current vendors

Necessary, Analytics and Advertising are separate choices. Optional technologies remain off until the choice is recorded. Analytics consent does not enable Advertising, and Advertising consent does not enable Analytics.

Only vendors marked active in the current registry may run after consent for their category.

Your current choice does not authorise a vendor added later. A change to the policy, copy, consent schema or vendor registry requires a new choice.

Google: Google Tag Manager

Purpose

Only vendors marked active in the current registry may run after consent for their category.

Domains and endpoints

https://www.googletagmanager.com

Browser storage

none

Allowed data

firm_slug, campaign_id, event_id, event_name, page_path, locale

Role

Processor used only to deliver tags permitted by the current category choice.

Retention

Transient delivery only; no separate storage is declared for this tool.

International transfers

Vendor agreement and applicable transfer safeguards, including an appropriate transfer mechanism where required.

Necessary

Purpose

Required for security, consent storage and core site functions. Always active.

Domains and endpoints

https://www.getcontentplan.com, https://api.getcontentplan.com/api/consent/receipt

Browser storage

millai_privacy_v1_gcp, millai_privacy_v1_gcp_id

Allowed data

We store a first-party consent identifier, firm and locale, document and software versions, category choices, choice source, timestamps and a reference to the previous receipt. The browser choice lasts 180 days. The append-only consent receipt is kept for 1095 days to demonstrate and honour the choice.

Role

Mill AI is the controller of the consent choice and receipt.

Retention

P180D / P1095D

International transfers

Vendor agreement and applicable transfer safeguards, including an appropriate transfer mechanism where required.

Analytics

Google: Google Analytics 4

Purpose

Google Analytics and Microsoft Clarity help us understand and improve the site.

Domains and endpoints

https://www.google-analytics.com, https://region1.google-analytics.com

Browser storage

_ga, _ga_*, _gid

Allowed data

firm_slug, campaign_id, event_id, event_name, page_path, locale, value, currency, content_name, content_ids, content_type, order_id

Role

Processor acting on our documented instructions for the stated purpose.

Retention

According to the configured retention setting for this firm's property.

International transfers

Vendor agreement and applicable transfer safeguards, including an appropriate transfer mechanism where required.

Microsoft: Microsoft Clarity

Purpose

Google Analytics and Microsoft Clarity help us understand and improve the site.

Domains and endpoints

https://www.clarity.ms, https://scripts.clarity.ms, https://*.clarity.ms

Browser storage

_clck, _clsk

Allowed data

page_path, locale, interaction_data

Role

Processor acting on our documented instructions for the stated purpose.

Retention

According to the vendor's configured product retention setting.

International transfers

Vendor agreement and applicable transfer safeguards, including an appropriate transfer mechanism where required.

Advertising

No vendor is active in this category under the current registry.

Consent settings

You can change or withdraw either optional choice at any time through Consent settings in the footer. Withdrawal records a new receipt and prevents new optional collection; it does not affect processing that lawfully occurred before withdrawal.

Your data protection rights

Where the GDPR applies and subject to its conditions, you may request access, rectification, erasure, restriction and portability of your data; object to processing; withdraw consent without affecting earlier lawful processing; and lodge a complaint. You also have the rights provided by law in relation to decisions based solely on automated processing that produce legal or similarly significant effects.

Right to complain

Where the GDPR applies, you may lodge a complaint with the competent supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement.

11. Contact

Questions about this policy? Email us at contact@millai.eu.

12. Mill AI newsletter

Our websites offer an optional signup for the Mill AI newsletter (practical tips and news from Mill AI tools, at most twice a month). Subscribing is voluntary, separate from using the product, and uses double opt-in: we send a confirmation e-mail and only a confirmed address joins the list. The subscriber list is administered at the Mill AI portfolio level (contact@millai.eu) and stored on encrypted infrastructure in the EU (AWS, eu-central-1). Legal basis: consent (art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every issue or by writing to contact@millai.eu - withdrawal takes effect immediately. We delete unconfirmed signups after 30 days, and after you withdraw consent we keep only an irreversible hash of your address, so that we never contact you again.