Privacy policy

Data controller

• Controller: [NOMBRE Y APELLIDOS]
• Tax ID (NIF, Spain): [NIF]
• Address: [DOMICILIO]
• Contact: hola@holamila.app

What data we process

If you book a demo

Your name, your business name, your town, your Instagram handle if you give it to us and your phone number. These are the fields of the form on the home page.

If you subscribe to Mila

• Your email address, so you can sign in to the app.
• Your business and brand details: name, sector, town, colours, tone, logo.
• The photos you upload and your conversations with Mila.
• The proposals, posters and copy Mila prepares for you, and what she learns about your business.
• Your preferred language, so we can write to you and Mila can talk to you in it.
• Billing details. Payments are handled by Stripe: we never see or store your card details.

What we use it for

• To call you and show you Mila, if you booked a demo.
• To provide the service: understand your business, suggest ideas, create your posters and videos, organise your calendar and, once you approve it, post on your social media.
• To charge you and issue invoices.
• To help you when you get in touch.

Your business’s photos, copy and conversations are only used to create your communications. We don’t use them to train our own AI models, we don’t sell them and we don’t share them with anyone for advertising.

Legal basis

• Demo: pre-contractual steps you ask us to take when you send the form (Article 6(1)(b) GDPR).
• Customers: performance of the service contract (Article 6(1)(b) GDPR).
• Billing: compliance with our legal, tax and accounting obligations (Article 6(1)(c) GDPR).

Who else accesses the data

To provide the service we use suppliers that process data on our behalf (processors). They only access what they need to do their part:

• Supabase: database, app sign-in and photo storage, on servers in the European Union.
• Vercel: hosting of the website and server.
• Anthropic: the language model Mila thinks and writes with.
• fal.ai: the models that generate images and videos.
• Stripe: subscription payments.
• Resend: sending the service’s emails.

Some of these suppliers may process data outside the European Economic Area. In that case, the transfer relies on the safeguards provided by the GDPR, such as the European Commission’s standard contractual clauses. We only disclose data to authorities when the law requires us to.

How long we keep it

• Demo data: 12 months if you don’t subscribe. After that, we delete it.
• Customer data: for as long as the contract lasts. When you cancel we delete it, except what the law requires us to keep (for example, invoices) for the statutory period.

Your rights

You can ask us to access, correct or delete your data, object to or restrict its processing, or take it with you in a format you can use elsewhere. Email us at hola@holamila.app saying what you’d like to do; we’ll reply within one month.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency at www.aepd.es.