Privacy policy

1. Introduction

Milesto ("we", "our", "us") operates the milesto.io website and project management platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

We collect information you provide directly:

• Account information (name, email address, password)
• Project data you create within the platform (projects, milestones, tasks, deliverables)
• Communications you send to us

We automatically collect:

• Usage data (pages visited, features used)
• Device and browser information
• IP address and approximate location

3. How We Use Your Information

• To provide and maintain the Milesto platform
• To authenticate your identity and secure your account
• To send transactional emails (confirmations, password resets, weekly briefings)
• To improve our service and develop new features
• To respond to your support requests

4. AI Features

Milesto offers optional AI-powered features (chat assistance, draft generation, project explanations). When you use these features, relevant project context is sent to our AI provider (OpenAI) to generate responses. We do not use your data to train AI models. AI features can be disabled at any time.

5. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We use row-level security policies to ensure users can only access their own project data. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text.

6. Third-Party Services

We use the following third-party services:

• Supabase - database, authentication, and storage
• Vercel - application hosting
• Cloudflare - DNS and CDN
• Resend - transactional email delivery
• OpenAI - AI-powered features (optional)
• Google - OAuth sign-in (optional)

7. Data Sharing

We do not sell your personal information. We share data only with the third-party service providers listed above, as necessary to operate the platform. We may disclose information if required by law.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Export your project data

To exercise these rights, contact us at the email below.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the platform.

11. Contact

If you have questions about this Privacy Policy, contact us at privacy@milesto.io