Privacy Notice

• Account data — name, email address, login credentials, agency membership and role.
• Content data — dockets, tasks, time entries, notes, client and contact records you enter.
• Support data — messages, tickets, and attachments you send us.
• Technical data — IP address, device and browser identifiers, usage and error telemetry.
• Billing data — subscription status and seat counts. Card details are collected and held by Stripe, our payment processor, not by us.

• Creating and administering accounts, and providing the Service — contract.
• Billing, subscription management, and tax compliance — contract, legal obligation.
• Security, abuse and fraud prevention — legitimate interests.
• Customer support — contract, legitimate interests.
• Product improvement and aggregate analytics — legitimate interests.
• Marketing emails, where sent — consent, withdrawable at any time.

• Service providers / subprocessors — hosting, database, email delivery, and error monitoring providers acting on our instructions.
• Stripe, our payment processor, for payments, subscription management, invoicing, and sales tax calculation.
• Professional advisers — legal and accounting, where necessary.
• Authorities, where required by law or to protect legal rights.

We do not sell personal data.

Our providers may process data outside Canada, including in the United States and the European Economic Area. Where data leaves the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and content data for as long as your agency's account is active, and for up to 90 days after cancellation to allow recovery and export. Billing and tax records are kept for the period required by law (generally seven years). Other data is deleted or anonymised when no longer needed.

Depending on where you live, you may request access to your personal data, correction, erasure, restriction of processing, portability, or object to processing, and withdraw consent at any time. Contact privacy@milg.ca and we will respond within one month. Canadian users may complain to the Office of the Privacy Commissioner of Canada; UK/EEA users may complain to their local supervisory authority.

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls enforced in the database, least-privilege access for staff, and audit logging of sensitive actions.

We use strictly necessary cookies and local storage to keep you signed in, remember your agency selection, and enable offline use. We do not use advertising cookies. Any analytics we use is limited to aggregate product usage; you can clear or block cookies in your browser settings, though sign-in will not work without the essential ones.

Milgrom Marketing inc., Ontario, Canada — privacy@milg.ca.