[go: up one dir, main page]
Milled Legal

Privacy Policy

Effective date: September 18, 2026

Full Stack LLC ("us", "we", or "our") operates the https://milled.com/ website (the "Service").

This page informs you of our policies regarding the collection, use, sharing, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. This policy explains how we collect and use information when you use the Service. We encourage you to review this policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://milled.com/

Definitions

"Personal Data" means information about a living individual who can be identified from it, such as a name or email address. "Usage Data" means information collected automatically when you use the Service, such as your IP address, browser, and the pages you visit. "Customer Data" means the account details of a business customer's users and the content those users create in the Service, as described under Business Customers and Workspace Content.

Full Stack LLC is the controller of your Personal Data, except for Customer Data, where your organization is the controller and we act as its processor.

Business Customers and Workspace Content

When you use Milled through an account provided by your employer or another organization, that organization decides what its users may store in private collections, lists, and notes. For that content, and for the account details of the organization's users, the organization is the controller and Milled processes them only on the organization's instructions under our Data Processing Agreement. Milled remains the controller for billing, security and abuse prevention, the support relationship, analytics, and public-archive data. If you have a request about content in an organization's workspace, contact that organization first; we will help them respond.

The Public Email Archive

Milled collects marketing emails that brands send to email addresses we control, and publishes those emails so marketers can research them. These emails occasionally contain personal data, such as the name or email address of the person who sent them or people featured in the email. We process this data on the basis of our legitimate interest in operating a public archive of commercial email. If you appear in an archived email and want it removed or edited, contact [email protected]; we review every request and remove content where the request is well founded.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Cookies and Usage Data

We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Usage Data

We may also collect information how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. The Usage Data we collect is generally non-identifying, but if we associate it with you as a specific and identifiable person, we will treat it as Personal Data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.
  • Advertising Cookies. Advertising Cookies are used to serve you with advertisements that may be relevant to you and your interests.

Account and Data Deletion Requests

You can request deletion of your account and personal data at any time. To submit a deletion request:

  1. Email us at [email protected] with the subject line "Data Deletion Request" or use our contact form at https://milled.com/about/contact
  2. Include in your request:
    • Your full name
    • Email address associated with your account
    • Any other information that will help us identify your data

We will respond to your request within 45 days. If we need more time (up to 90 days), we will inform you in writing. Once we verify your identity, we will delete your personal data from our systems, except where we have a legal obligation to retain it or where deletion would interfere with:

  • Completing an active transaction
  • Detecting security incidents or protecting against fraud
  • Debugging to identify and repair errors
  • Complying with legal obligations
  • Other internal uses that are compatible with the context in which you provided the information

We will notify you once the deletion is complete or if we cannot fulfill your request due to any of the above exceptions.

Use of Data

Full Stack LLC uses the collected data for various purposes:

  • To provide and maintain our Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Service
  • To monitor the usage of our Service
  • To detect, prevent and address technical issues
  • To find and/or prevent fraud
  • To develop new products, services, features, and functionality
  • To comply with regulatory and legal obligations
  • For purposes as disclosed at the time you provide your information, with your consent, and as further described in this policy
  • To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Legal Basis for Processing Personal Data Under General Data Protection Regulation (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

  • Performance of a contract: providing the Service to you, managing your account, and billing.
  • Legitimate interests: operating the public email archive, securing the Service and preventing abuse, understanding how the Service is used, managing our relationships with business users, and sending service announcements. You can object to processing based on our legitimate interests.
  • Consent: analytics cookies where the law requires consent, and marketing emails. You can withdraw consent at any time.
  • Legal obligation: keeping records we are required to keep, and responding to lawful requests.

Retention of Data

We keep Personal Data for as long as your account is active or as needed to provide the Service, and afterwards only as long as required to meet legal obligations, resolve disputes, and enforce our agreements. Usage Data is kept for a shorter period unless it is needed for security or to improve the Service.

When you delete your account, or ask us to delete your data, we remove it from our live systems promptly and it expires from backups on their normal cycle, currently within 31 days.

International Transfers

Full Stack LLC is based in the United States, and our service providers operate in the United States, the European Union, and the United Kingdom. Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, or country, where the data protection laws may differ from those of your jurisdiction.

When we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) with our service providers, and we offer those clauses to business customers in our Data Processing Agreement. You can request a copy of the relevant clauses at [email protected].

Disclosure of Data

Business Transaction

If Full Stack LLC is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. By providing your Personal Data, you agree that we can transfer such information in those circumstances without your further consent. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Disclosure for Law Enforcement

Under certain circumstances, Full Stack LLC may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

Full Stack LLC may disclose your Personal Data in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of Full Stack LLC
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. You use the Services and provide us with information at your own initiative and risk. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you have with us has been compromised), please immediately notify us of the problem by contacting us using the details in the Contact Us section below.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Full Stack LLC aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

  • The right to access, update or to delete the information we have on you.Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.

  • The right of rectification.You have the right to have your information rectified if that information is inaccurate or incomplete.

  • The right to object.You have the right to object to our processing of your Personal Data.

  • The right of restriction.You have the right to request that we restrict the processing of your personal information.

  • The right to data portability.You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.

  • The right to withdraw consent.You also have the right to withdraw your consent at any time where Full Stack LLC relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the details in the Contact Us section below.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

California Privacy Rights

Milled does not currently meet the thresholds that make the California Consumer Privacy Act apply to a business. We nevertheless do not sell personal information and do not share it for cross-context behavioral advertising, and we honor requests from California residents to know what personal information we hold, to correct it, and to delete it. Email [email protected] with the subject line "California Privacy Request."

Service Providers

We share personal data with companies that help us run Milled: hosting and edge networking, databases and storage, email delivery, customer support, error and performance monitoring, and payments (Paddle, our Merchant of Record, which processes payment details under its own privacy policy). These providers may access your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. The current list of providers that process customer data is published at milled.com/legal/subprocessors.

We also use a customer relationship management service (Attio) to manage our relationships with business users, and we may enrich business contact records with publicly available professional information, such as job title and company, obtained from a data provider (People Data Labs). Members of organizations with a signed subscription agreement are excluded from this enrichment. You can ask us to stop enriching your record, or to delete enriched information, at any time by contacting [email protected].

We use Google Analytics 4 to understand how the Service is used. In the European Economic Area and the United Kingdom it loads only after you accept analytics cookies. Analytics data is processed for our own purposes and is not sold or shared for advertising.

Affiliate links

Some links from archived emails to retailers pass through an affiliate network (Skimlinks, Sovrn Commerce, Amazon Associates, or CJ Affiliate) before reaching the retailer. The network records the click, may set a cookie on its own domain so that a later purchase can be attributed to it, and pays Milled a commission. We do not send your name, email address, or account details with the click. The network receives the technical data of a redirect, such as your IP address, browser, and the Milled page you came from, and is an independent controller of that data under its own privacy policy.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third-party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

For material changes we will also let you know by email or by a notice on the Service, and we will update the effective date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • By email: [email protected] (data protection questions and requests)
  • By mail: Full Stack LLC, 16192 Coastal Highway, Lewes, DE 19958, United States
  • By visiting this page on our website: https://milled.com/about/privacy