Privacy policy

1. Introduction

Milesto ("we", "our", "us") operates the milesto.io website and project management platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

We collect information you provide directly:

• Account information (name, email address, password)
• Project data you create within the platform (projects, milestones, tasks, deliverables)
• Communications you send to us

We automatically collect:

• Usage data (pages visited, features used)
• Device and browser information
• IP address and approximate location

3. How We Use Your Information

• To provide and maintain the Milesto platform
• To authenticate your identity and secure your account
• To send transactional emails (confirmations, password resets, weekly briefings)
• To improve our service and develop new features
• To respond to your support requests

4. AI Features

Milesto offers optional AI-powered features (chat assistance, draft generation, project explanations). When you use these features, relevant project context is sent to our AI provider (OpenAI) to generate responses. We do not use your data to train AI models. AI features can be disabled at any time.

5. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We use row-level security policies to ensure users can only access their own project data. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text.

6. Third-Party Services

We use the following third-party services:

• Supabase - database, authentication, and storage
• Vercel - application hosting
• Cloudflare - DNS and CDN
• Resend - transactional email delivery
• OpenAI - AI-powered features (optional)
• Google - OAuth sign-in (optional)
• Sentry - error and performance monitoring. When something goes wrong we receive technical details of the error, and for a sample of page loads we receive timing data. For a sample of visits Sentry also records a replay of the session, with all text and anything you type masked and images blocked, so we can see how errors and problems happen.
• Vercel Web Analytics and Speed Insights - anonymous page-view and performance statistics, and anonymous usage events (for example, that an account was created or that one of our free calculators was used), none of which are tied to you or your IP address. They set no cookies.
• Crisp - the live chat window. Crisp receives the messages you send through it and, if you are signed in, your name and email address so we can reply to you. Crisp also receives the IP address of anyone whose browser loads the chat window; it deletes it when the chat session expires, unless you start a conversation, in which case Crisp keeps it (Crisp states it is legally required to keep such logs).

7. Data Sharing

We do not sell your personal information. We share data only with the third-party service providers listed above, as necessary to operate the platform. We may disclose information if required by law.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Export your project data

To exercise these rights, contact us at the email below.

9. Cookies

We use essential cookies for authentication and session management. Our chat provider, Crisp, also stores a cookie and some local data in your browser (named crisp-client) for six months from your last visit so that a chat conversation continues across pages and visits; Crisp states that they are not used for tracking. Sentry keeps a marker in your browser's session storage, which is cleared when you close the tab. When you first arrive we keep a short note in that browser tab (session storage, cleared when the tab closes) of the website that referred you, any campaign tags in the link and the page you landed on; if you sign up, we save it with your account so we know how people find Milesto. Our analytics set no cookies. We do not use advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the platform.

11. Contact

If you have questions about this Privacy Policy, contact us at privacy@milesto.io