Privacy Policy

1. Who we are

The Milkman application at app.milkman.one ("Service") is operated by Milkman Stories Media, trading as Milkman Digital and Milkman One, registered with the Dutch Chamber of Commerce (KvK) under number 73573566, Jupiterkade 7, 2516 BS The Hague, the Netherlands. In this policy "Milkman", "we" and "us" mean Milkman Stories Media. We are the data controller for the personal data we process through the Service.

2. What data we collect

We collect the following categories of personal data:

• Account data: email address, name, avatar (optional), hashed password or OAuth identifier.
• Workspace & content data: brand profiles, content drafts, outlines, assets you upload, and AI-generated content associated with your workspace.
• Connected social accounts: access tokens and basic profile information for LinkedIn, Facebook, Instagram, and YouTube accounts you connect, strictly to perform actions you request (publishing posts, reading engagement metrics).
• Usage data: the features you use and the AI tokens your workspace consumes, for billing and budgets, plus aggregated page-view statistics (see Section 10).
• Billing data: processed by Stripe. We store only the customer reference and subscription status, not card details.
• Email preferences: whether you agreed to receive marketing email, when, and the wording you agreed to (see Section 11).
• Technical data: IP address, browser type, device information, cookies strictly necessary for authentication.
• Short-link clicks: brands can create short links (app.milkman.one/r/…) for their posts. When anyone opens one, we record the time, the country, the browser's user agent and the referring page, so the brand can see how many clicks its posts get. We do not store the IP address and do not set a cookie.

3. Why we process your data (legal basis)

• Contractual necessity: to provide the Service you signed up for (account, workspace, content generation, publishing), including the service emails described in Section 11.
• Legitimate interest: to secure the Service and prevent abuse; to understand how the Service is used through aggregated page-view statistics (Section 10); to send the getting-started emails described in Section 11; and to count clicks on short links for the brand that created them.
• Legal obligation: to comply with tax and accounting laws (invoices are retained for 7 years).
• Consent: for marketing email (Section 11). You can withdraw your consent at any time.

4. How we use connected social accounts

When you connect a LinkedIn, Facebook, Instagram, or YouTube account, we store the access token securely and use it only to perform actions you explicitly initiate:

• Publish content you create in Milkman to the chosen account
• Read engagement metrics (likes, views, comments) on content you published through Milkman
• Display your account name, avatar, and basic profile info in the app

We do not access, read, or store any content other than what is directly needed for the above functions. We never post anything without your explicit action. You can disconnect any account at any time in Settings → Channels.

5. Who we share data with

We share data only with service providers strictly necessary to run the Service:

• Supabase (EU): database, file storage & authentication hosting
• Vercel (EU): application hosting and Vercel Web Analytics (see Section 10)
• Stripe (EU/US, DPA signed): payment processing
• Resend (EU): delivery of the welcome email and workspace invites
• Loops (US): delivery of login codes, notifications, reports and client invites, and of marketing email if you agreed to receive it (see Section 11)
• OpenRouter (US): routes AI requests to the model providers below
• Anthropic & OpenAI (US, DPA signed): AI content generation; content sent to these providers is not used for model training
• Google (US): AI image generation through Google's paid Gemini API tier, which does not use content for model training, and AI analysis of images, videos and documents you add, through the Gemini API
• Groq (US): transcription of audio and video you add
• LinkedIn, Meta, Google: only when you explicitly connect those accounts, and only for the actions listed in Section 4

We do not sell your data. We do not share data for advertising purposes.

6. International transfers

Some processors (Anthropic, OpenAI, OpenRouter, Google, Groq, Loops, Stripe) are based outside the EEA. Transfers are covered by Standard Contractual Clauses (SCCs) and/or adequacy decisions, such as the EU-US Data Privacy Framework, where applicable.

7. How long we keep your data

• Account & workspace data: as long as your account is active. After deletion, all personal data is removed within 30 days.
• Billing records: 7 years (Dutch tax law).
• Logs & analytics: 12 months, then deleted or anonymized.
• Marketing email consent records: while you are subscribed, and after that only as long as we need them to show that we had your consent.

8. Your rights (GDPR)

You have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten"): see Data Deletion
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these rights, email us at helpdesk@milkman.digital. We respond within 30 days.

9. Security

We use encryption in transit (TLS) and at rest, role-based access controls, regular security updates, and access logging. Access tokens for connected social accounts are encrypted in the database. Only the minimum number of engineers have production access.

10. Cookies, local storage and analytics

We use only cookies that are strictly necessary: the sign-in cookies that keep you logged in, a security cookie that lasts 10 minutes while you connect a social account, and one cookie that remembers whether the sidebar is open. Your browser's local storage keeps interface preferences on your device, such as the theme, panel sizes and the brand you last opened. We do not use advertising or cross-site tracking cookies.

We use Vercel Web Analytics for cookieless, aggregated page-view statistics. It does not set cookies and does not record sessions: no session replay, heatmaps or keystroke capture. For each page view it receives the page address, the referring site, and the browser, operating system, device type and country derived from the request. Vercel counts unique visitors with a temporary identifier derived from the request, which it discards after 24 hours.

Before a page view leaves your browser, we remove everything after the "?" or "#" in the address, replace the secret part of review links, workspace invite links and client invite links with a placeholder, and do not send page views of the OAuth authorization page or the sign-in callback at all. The secret tokens in those links therefore never reach the analytics.

Because these statistics use no cookies and are only reported in aggregate, we do not ask for consent for them. We rely on our legitimate interest in understanding how the Service is used (Section 3). You can object at any time by emailing helpdesk@milkman.digital.

11. Emails we send

Service emails. We send the emails you need to use the Service: login codes, workspace and client invites, notifications about your content (for example publishing results, approvals, change requests, and connected accounts that need reconnecting), reports your agency sends you, and the welcome email. We send these whether or not you agreed to marketing email, and they contain no marketing.

Getting-started emails. After you create your first workspace, we may send you a short series of emails with tips for using the Service. Each one has an unsubscribe link, which stops the series but not the service emails. Offers and referral invitations go only to people who agreed to marketing email.

Marketing email. We send product news, launch updates and offers only if you agreed to receive them, by ticking the box at sign-up or on the waitlist. That box is never ticked for you. You can withdraw your consent at any time with the unsubscribe link in every marketing email, or by emailing helpdesk@milkman.digital. Withdrawing does not affect service emails. We keep a record of when you gave your consent and the wording you agreed to, so we can show that we had it.

12. Minimum age

Milkman is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we delete it. If you believe someone under 18 has given us personal data, contact us at helpdesk@milkman.digital.

13. Changes to this policy

We may update this policy to reflect changes in the Service or legal requirements. Material changes will be communicated via email at least 30 days before taking effect.

14. Contact

Milkman Stories Media, trading as Milkman Digital and Milkman One
Jupiterkade 7, 2516 BS The Hague, the Netherlands
KvK 73573566
helpdesk@milkman.digital