Privacy Policy

Milestra ("we", "us") provides a performance-management platform for organizations. This policy explains what personal data we collect, why, and the choices you have.

What we collect

• Account data — name, work email, and role, provided by you or your workspace admin.
• Workspace content — goals, KPIs, action steps, evidence files and links, meeting notes, and reports your organization creates.
• Usage data — pages visited and actions taken inside the app, used to improve the product.

How we use it

We use your data to operate the service (authenticating you, showing your workspace, sending notifications you or your admins configure), to support your organization, and to improve Milestra. We do not sell personal data and we do not use your workspace content to train AI models.

AI features

Features such as evidence analysis and meeting summaries send the minimum content needed to a model provider on our subprocessor list, purely to return a result to your workspace. Outputs are stored in your workspace and can be deleted by your admins.

Sharing and storage

Workspace data is stored with our infrastructure providers (see Subprocessors) and is isolated per organization using row-level security. Data is encrypted in transit and at rest.

Retention and deletion

Your organization's admins control its data. Deleting content removes it from the active workspace. When an organization terminates its account, we delete workspace data within 90 days unless law requires retention.

Your rights

Depending on where you live (e.g. EU/EEA under GDPR), you may have rights to access, correct, export, or delete your personal data. Start with your workspace admin, or contact us at privacy@milestra.app.

Contact

Questions about this policy: privacy@milestra.app. Our handling of customer data is further described in our Data Processing Agreement.