Privacy Policy

Last updated: April 8, 2026

1. Who We Are

This website is operated by:

Mill AI

Address: [To be added]

NIP: [To be added]

Email: [email protected]

2. What Data We Collect

When you use Get Content Plan, we collect:

  • Email address - to deliver your content plan
  • Business description - to generate personalized content
  • Platform and package selection - to customize your plan

We do NOT collect or store:

  • Cookies for tracking (unless you accept analytics cookies)
  • Any data beyond what you voluntarily provide

3. How We Use Your Data

  • To generate and deliver your content plan via email
  • To respond to support requests
  • To improve our service (aggregated, anonymized analytics)

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on the following legal grounds:

  • Performance of a contract — Art. 6(1)(b): Processing your business description, generating content plans, and delivering them via email. This is necessary to provide the service you requested.
  • Consent — Art. 6(1)(a): Analytics cookies (Google Analytics, Microsoft Clarity) are only activated with your explicit consent via the cookie banner. You may withdraw consent at any time.
  • Legitimate interest — Art. 6(1)(f): Security measures, fraud prevention, and maintaining the technical integrity of our website.
  • Legal obligations — Art. 6(1)(c): Processing required to comply with applicable legal obligations (e.g., tax, accounting).
  • Consent — Art. 6(1)(a): Marketing communications, if any, are sent only with your explicit consent.

5. Data Retention

We retain your data for the following periods:

  • Business descriptions submitted via the form: deleted immediately after email delivery (not stored).
  • Email addresses: retained for up to 12 months for service delivery and support, then deleted.
  • Analytics data (Google Analytics): retained for 14 months (Google's default retention period).
  • Session recordings (Microsoft Clarity): retained for up to 30 days.
  • CRM data (Zoho): retained for up to 24 months or until you request deletion.
  • Server logs: retained for up to 30 days.

6. Third-Party Services (Data Processors)

We use the following third-party services to operate Get Content Plan. Your data may be shared with these processors as necessary:

  • Anthropic, PBC (USA) — AI content generation via Claude API. Processed under Standard Contractual Clauses (SCC). Privacy Policy
  • Cloudflare, Inc. (EU + USA) — website hosting, CDN, Workers (form processing), DNS. Privacy Policy
  • Zoho Corporation (India/USA) — Mail (transactional + correspondence), Campaigns (email outreach + sequences), CRM (customer relationship). Privacy Policy
  • LemonSqueezy, LLC (USA) — payment gateway, VAT handling (Merchant of Record), affiliate program. Privacy Policy
  • Google LLC (EU + USA) — Google Analytics 4, Google Tag Manager, Google Sheets (data logging). Analytics only with your consent. Privacy Policy
  • Microsoft Corporation (EU) — Microsoft Clarity, session recording and heatmaps (only with your consent). Privacy Policy
  • Hetzner Online GmbH (Germany) — server infrastructure (VPS Falkenstein, EU). Privacy Policy
  • Formbricks — surveys (PMF, NPS, exit) self-hosted on our Hetzner VPS (no separate third-party processor)

7. International Data Transfers

Some of our service providers are based outside the European Economic Area (EEA), primarily in the United States. We ensure appropriate safeguards for these transfers through Standard Contractual Clauses (SCCs) adopted by the European Commission, or through providers' compliance with equivalent data protection frameworks.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at [email protected].

You have the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl.

As a small business processing limited personal data, we are not required to appoint a Data Protection Officer (DPO) under GDPR Art. 37. For all data protection inquiries, please contact us at [email protected].

9. Cookies

We use the following types of cookies:

  • Essential cookies: Consent preference stored in localStorage. Persistent until cleared by the user. Required for the website to function properly.
  • Analytics cookies:
    • Google Analytics: _ga (2 years), _ga_* (2 years) — used to distinguish users and sessions.
    • Microsoft Clarity: _clck (1 year), _clsk (1 day) — used for session recording and heatmaps.
  • Marketing/advertising cookies: We do not use any marketing or advertising cookies.

Google Tag Manager does not set cookies itself but manages the tags that do.

Analytics cookies are only activated with your explicit consent via the cookie banner. You can also manage cookies in your browser settings. For instructions, visit your browser's help pages (Chrome, Firefox, Safari, Edge).

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

Questions about this policy? Email us at [email protected].