Privacy Policy

This Privacy Policy explains how Milliarium LLC (“Milliarium,” “we,” “us”) collects, uses, and shares information in connection with Milliarium Portfolio Management and related websites and services (the “Service”). By using the Service, you agree to this Policy. This Policy does not change the terms of any agreement you have with us.

1. Information We Collect

• Account & organization data: name, work email, organization name, role, and login credentials (passwords are managed by our authentication provider and stored in hashed form — we do not see them).
• Customer Data: the project, task, cost, resource, schedule, and related information you and your users enter into the Service.
• Billing data: subscription plan, seat counts, and payment status. Payment-card details are collected and processed directly by Stripe; we do not store full card numbers.
• Usage & device data: log data such as IP address, browser type, pages viewed, timestamps, and actions taken, used for security, troubleshooting, and improving the Service.
• Communications: messages you send us (e.g., support requests).

2. How We Use Information

• to provide, operate, secure, and maintain the Service;
• to authenticate users and protect against fraud and abuse;
• to process subscriptions and payments;
• to send transactional and service messages (e.g., confirmations, invites, password resets, receipts, and important notices);
• to provide support and respond to your requests;
• to monitor, analyze, and improve the Service; and
• to comply with legal obligations and enforce our terms.

3. How We Share Information

We do not sell your personal information. We share information only as needed to run the Service, with service providers (“sub-processors”) that act on our behalf under confidentiality and data-protection obligations, including:

• Supabase — database, authentication, and hosting of application data;
• Vercel — application hosting and delivery;
• Stripe — payment processing and subscription billing;
• Twilio SendGrid — sending transactional email.

We may also disclose information to comply with law or legal process, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice as required by law).

4. Cookies & Similar Technologies

We use strictly necessary cookies and similar technologies to keep you signed in, remember preferences, and secure the Service. We do not use the Service to serve third-party advertising. You can control cookies through your browser, but disabling necessary cookies may break sign-in and core functionality.

5. Data Retention

We retain Customer Data for as long as your account is active and as needed to provide the Service. After account closure we may retain data for a limited period to comply with legal obligations, resolve disputes, and enforce agreements, after which it is deleted or de-identified. Some records (for example, audit and billing records) may be retained longer where required.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, access controls, row-level data isolation between tenants, and breach-resistant password handling. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials.

7. International Transfers

We and our sub-processors may process and store information in the United States and other countries. Where required, we rely on appropriate safeguards for such cross-border transfers.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict the processing of your personal information, and to object or withdraw consent. Account administrators can manage and export much of their organization’s data within the Service. To make a request, contact us at support@milliarium.org. We will respond as required by applicable law (including GDPR and CCPA/CPRA where they apply). We will not discriminate against you for exercising these rights.

For Customer Data we process on your behalf, we act as a processor/service provider and act on the instructions of the customer that controls that workspace; individuals should direct requests to that customer.

9. Children’s Privacy

The Service is intended for business use and is not directed to children under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice (for example, by email or in-app). The “Last updated” date above reflects the most recent revision.

11. Contact

For privacy questions or requests, contact us at support@milliarium.org, Milliarium LLC, Five Waterford Lane, West Brandywine, PA 19335.