Privacy Policy

Last updated: October 9, 2026

Mill is operated by Glancerr LLC ("Mill," "we," "us," or "our"). This Privacy Policy describes how Mill collects, uses, stores, and discloses personal information when you visit usemill.ai or use the Mill application, including its AI agent, creative tools, connected services, and related features (the "Service").

For privacy questions or requests, contact hello@glancerr.com. Mill is intended for people who are at least 18 years old. We do not knowingly collect personal information from children under 18.

1. Information we handle

The information we handle depends on the features you use and the accounts and services you connect.

Information you provide

  • Account and profile information: such as your name and email address. Our authentication provider processes sign-in credentials. Mill may transiently handle your password to forward it to that provider when you create an account or update your password; Mill does not store your password.
  • Prompts and Run activity: prompts, instructions, chat and Run content, attached files, Run status, tool activity, approvals, and the results of work performed for you.
  • Creative work and files: uploaded or generated images, video, audio, documents, and other assets; project and app files; composition source and revisions; and related names, descriptions, metadata, and relationships. This can include source code or other material you choose to provide.
  • Memory: if Memory is enabled, Mill can create and store a personal summary and related memory records to support continuity between Runs. Memory is private to your account. Turning Memory off stops its use for new work but does not erase stored Memory; you can clear it separately in the product.
  • Connected-service information: account identifiers, profile details, content, posts, advertising information, analytics, and other data returned by a service you connect, to the extent needed for a feature you request. Connected services may also provide authorization or connection status information.
  • Custom MCP information: the server address, discovered tool names and descriptions, and any credential you choose to provide. Custom MCP credentials are kept in Mill's secure credential store. When you use a custom MCP, Mill sends the request and any necessary Run context to the server you configured; that server is operated by its own provider.
  • Billing and support information: subscription and payment status, credit and storage usage, transactions, auto-reload settings, and messages you send to support. Stripe processes payment-card details; Apple and Google process purchases made through their stores. Mill and RevenueCat process purchase identifiers, receipts, and subscription status to verify App Store and Google Play purchases and associate them with your Mill account. Mill does not store full card numbers.

Information collected through use

Mill and its service providers may receive technical and activity information such as IP address, browser and device details, log and diagnostic data, pages or features used, timestamps, and information about requests and interactions. We also maintain operational records needed to execute Runs, secure the Service, meter usage, provide support, and investigate errors or abuse.

Mill stores essential cookies needed for preferences and the cookie choice itself. Optional analytics and advertising measurement tools load only if you accept optional cookies. Your choice is stored for six months, and you can change it at any time using Cookies in the Legal section of the footer. Rejecting optional cookies leaves essential cookies in place and prevents those optional tools from loading.

Information from other services

When you connect an account or direct Mill to use an external service, we may receive information from that service under the permissions you grant and its own terms. If you ask Mill to use a website, browser, integration, or custom MCP, information necessary to carry out that request may be sent to or received from the relevant third party.

2. How we use information

We use information to:

  • create and secure your account and provide the Service you request, including Runs, AI reasoning and generation, Memory, assets, projects, apps, compositions, and Sandboxes;
  • store, retrieve, transform, and deliver your files and work;
  • route requests to AI models and tools, and carry out actions through connected accounts, websites, or custom MCP servers when you ask us to;
  • manage subscriptions, credits, auto-reload, storage, concurrency, and provider costs;
  • provide support, send account, security, billing, and service communications, and recover or resume work;
  • operate, troubleshoot, protect, and improve Mill, including preventing fraud, abuse, and security incidents; and
  • comply with legal obligations and enforce our terms.

Each authenticated identity has one personal account. Runs, prompts, assets, projects, Memory, connections, billing information, and settings are account-scoped and are not shared with another Mill user through team or collaborative-account features.

Mill does not use your prompts, content, or generated outputs to train Mill's own general-purpose AI models. When a feature uses an external AI or embedding provider, the information needed for that request is processed by that provider. Provider retention and training terms can vary by provider, service, model, and route. Where available, Mill configures providers to limit retention or model training, but cannot extend those settings to every provider, external tool, website, connected service, or custom MCP server.

3. Legal grounds for processing

Where data-protection law requires a legal basis, we generally rely on:

  • Contract: to create and administer your account, provide requested features, process payments, and perform actions you direct.
  • Legitimate interests: to secure, maintain, troubleshoot, and improve Mill; prevent abuse; keep operational and billing records; and measure the performance of the Service, where those interests are not overridden by your rights.
  • Consent: where we have requested and obtained it for processing that requires consent, including optional analytics and advertising measurement. You can change or withdraw that choice at any time using Cookies in the Legal section of the footer; this does not affect processing already carried out.
  • Legal obligation: to comply with applicable laws, lawful requests, and accounting or recordkeeping duties.

The applicable basis depends on the feature, context, and your location. This Policy is a notice about our practices; it is not itself a request for or grant of consent.

You are not generally required by law to provide information to Mill. Account and billing information is needed to create an account or purchase a plan; without it, those parts of the Service cannot be provided. Prompts, files, and connected-service access are optional, but the features that use them will not work without the relevant information or permissions.

4. When we disclose information

We disclose information to the extent needed to operate the Service, comply with law, or carry out your instructions. Recipients may include:

  • Hosting, authentication, database, storage, workflow, and compute providers, including Vercel, Supabase, Cloudflare R2, and Vercel Sandbox, for the application, account records, files, Run execution, and project or composition work.
  • AI and model providers, which may receive prompts, files, Run context, or generated content needed for reasoning, generation, embeddings, or other requested features. Requests may be routed through services such as Vercel AI Gateway or OpenRouter and then to the selected model provider. The route depends on the feature, model, and availability.
  • Providers of connected services and the third-party platforms you connect. They may process connection information, content, account data, or instructions needed to retrieve information, publish or manage content, or perform other actions you request.
  • Websites and custom MCP servers that you ask Mill to interact with. These services receive the information necessary for the requested interaction and are governed by their own terms and privacy practices.
  • Payment and communications providers, including Stripe, Apple, and Google for payments, RevenueCat for App Store and Google Play purchase verification and subscription status, and Resend for transactional email.
  • Measurement providers, including PostHog, Vercel Analytics, and the X conversion-measurement tag. Optional browser measurement runs when you have accepted optional cookies. Native screen and technical-error analytics use PostHog when you enable Optional analytics in Settings. Server-side operational and AI-call telemetry may also use PostHog to operate and monitor the Service. These providers may receive technical identifiers, page or screen visits, event information, error details, and request metadata needed for those purposes.
  • Professional advisers, authorities, or transaction parties when needed for legal compliance, protecting rights and safety, or a merger, financing, acquisition, or sale of the business.

We do not exchange personal information for monetary consideration. Some privacy laws define "sale" more broadly than an exchange for money. Disclosures through advertising or measurement tools—such as the X conversion-measurement tag—may qualify as a sale, sharing, or targeted-advertising disclosure under an applicable law. Where that law gives you a right to opt out, contact hello@glancerr.com. We will process verified privacy requests in accordance with applicable law. We do not knowingly sell or share personal information of people under 16 for cross-context behavioral advertising.

5. Storage and retention

We retain information while your account is active for as long as needed to provide the Service and for the purposes described in this Policy. Different data can have different retention periods.

If your subscription ends or an unresolved payment failure starts an account-retention lifecycle:

  • By day 7 after that lifecycle starts, Mill clears the account's durable file storage. This means all files in that storage are cleared, whatever they contain—not only files generated by Mill. This can include uploaded files, generated outputs, and stored project, app, composition, or other account files.
  • By day 90 after that lifecycle starts, Mill schedules deletion of the account and its remaining account data. If billing is restored and the retention lifecycle is canceled before deletion, the scheduled deletion does not proceed.

You can also use Settings → Delete account to request deletion without waiting for the subscription-retention schedule. Account deletion cancels a Stripe subscription, interrupts active work, disconnects supported third-party service connections, clears account file storage, and deletes the Mill account and sign-in identity. Deleting your Mill account does not cancel an App Store or Google Play subscription; cancel it separately through the store where you subscribed. Some downstream deletion steps may take additional time to complete. Deleting a Mill account does not remove content already published to a social network or erase information held independently by a third-party provider. We may retain information where required by law or where necessary to resolve disputes, protect the Service, or establish or defend legal claims.

6. Your privacy rights and choices

Depending on where you live, you may have rights to access, correct, delete, obtain a portable copy of, restrict, or object to certain uses of your personal information, and to withdraw consent. You may also complain to your local data-protection authority. To make a request, email hello@glancerr.com from the account email where possible; we may ask for information needed to verify your request.

Where the California Consumer Privacy Act, as amended, applies, California residents may have rights to know, access, correct, delete, and opt out of sale or sharing of personal information, subject to legal exceptions. In the preceding 12 months, the categories we have collected or disclosed include:

  • Identifiers and account information (such as name, email, account identifiers, and technical identifiers), from you, your device, and account activity, to create and secure accounts and operate the Service.
  • Commercial and billing information (such as subscription, credit, payment status, and usage records), from you, Mill, and payment providers, to provide purchases, measure usage, and manage billing.
  • Internet or other electronic activity (such as log, page, feature, and Run interaction data), from your use of Mill and measurement tools, to operate, secure, troubleshoot, and measure the Service.
  • User content and files (such as prompts, messages, uploads, generated outputs, and project files), from you and Runs you ask Mill to perform, to provide the requested features and store your work.
  • Connected-account information (such as account identifiers, posts, advertising data, and analytics), from services you connect, to retrieve information and carry out actions you request.
  • Inferences and Memory (such as a personal summary or preferences), derived from your activity or content when Memory is enabled, to provide continuity between Runs.

We may disclose these categories to the recipient categories in Section 4 for the purposes described above. We do not exchange personal information for monetary consideration. Some laws define "sale" more broadly; the X conversion-measurement tag may involve disclosures that qualify as a sale, sharing, or targeted advertising under those laws. To submit a privacy request, including an applicable opt-out request, contact hello@glancerr.com. We will not discriminate against you for exercising a privacy right.

You can download a copy of account-owned data using Settings → Export data. To request access, correction, or deletion not covered by the product controls, contact us at the email above. We may need to verify your identity and authority before completing a request.

Mill uses automated systems, including AI, to generate outputs, route Runs to models or tools, and administer usage and billing. Billing status can also trigger the suspension and account-retention process described in Section 5. These processes use your Run instructions, selected features, and account or payment status; you can contact us to challenge an error or request help.

Use Cookies in the Legal section of the footer to reopen the cookie banner and accept or reject optional cookies. Your choice takes effect immediately. Revoking optional cookies reloads the page to stop integrations that were already loaded. Essential cookies remain active either way. You can also manage cookies through your browser settings, though blocking essential cookies may affect sign-in, preferences, or other features. For a request to opt out of applicable advertising-related disclosures beyond this control, contact us using the email above. The tracking configuration can change; this Policy will be updated when our practices materially change.

7. International processing

Mill and its service providers may process information in countries other than the country where you live, including the United States. Where required by applicable law, international transfers use an approved transfer mechanism or other appropriate safeguards. You may contact us to ask about the safeguards applicable to your information.

8. Security

We use technical and organizational measures designed to protect information, including access controls and secure infrastructure. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

9. Changes and contact

We may update this Policy when our practices or legal obligations change. We will post the current version here and update the date above. We will provide additional notice of material changes where required.

For questions or privacy requests, contact:

Glancerr LLC — Email: hello@glancerr.com