Research Demonstrator - Not for operational use.

Privacy Policy

# Privacy Policy
**Last Updated:** December 3, 2025
**Effective Date:** December 3, 2025

## 1. Overview
Milenial Procurments Inc. ("we," "us," or "our") operates the Milenial Compliance Platform, an AI-powered Compliance-as-a-Service (CaaS) solution. We are committed to protecting your privacy and handling your data with transparency and care. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

## 2. Information We Collect

### 2.1 Information You Provide Directly
• Account Information: Name, email address, company name, job title, phone number
• Payment Information: Billing address, payment card details (processed securely by payment processors)
• Compliance Data: Documents, supplier information, procurement data, audit trails, compliance check results
• Communications: Support tickets, chat logs, email correspondence
• Profile Information: User preferences, notification settings, API keys

### 2.2 Information Collected Automatically
• Usage Data: IP address, browser type, device information, operating system
• Platform Activity: Feature usage, session duration, audit logs, compliance checks performed
• Cookies and Tracking: Authentication tokens, session IDs, analytics cookies
• AI Training Data: Anonymized compliance patterns and risk assessment results

### 2.3 Information from Third Parties
• Integration Partners: Data from procurement platforms via API connections
• Authentication Providers: Information from Single Sign-On (SSO) services
• Government Databases: Public procurement data and compliance regulations where legally accessible

## 3. How We Use Your Information

### 3.1 To Provide and Maintain Our Services
• Process compliance checks and risk assessments
• Generate audit reports and documentation
• Maintain account security and authentication
• Provide customer support and troubleshooting
• Process payments and subscriptions

### 3.2 To Improve and Develop Our Platform
• Train and improve AI compliance algorithms using anonymized data
• Analyze usage patterns to enhance user experience
• Develop new features and functionality
• Conduct security monitoring and threat detection

### 3.3 For Communication
• Send service notifications and updates
• Provide compliance alerts and deadline reminders
• Respond to support requests and inquiries
• Send administrative information (terms changes, policy updates)

### 3.4 Legal and Compliance Purposes
• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service and other agreements
• Protect against fraudulent or illegal activity
• Exercise legal rights and defend claims

## 4. How We Share Your Information

### 4.1 With Your Consent
We share information when you direct us to, such as:
• Integrating with third-party procurement platforms
• Sharing compliance reports with auditors or regulators
• Collaborating with other users within your organization

### 4.2 With Service Providers
We engage trusted third parties to perform functions including:
• Cloud Infrastructure providers for data storage and processing
• Payment Processing providers for payment transactions
• Customer Support providers for help desk services
• Analytics providers for platform usage insights
• Email Services providers for communications

### 4.3 For Legal and Security Reasons
We may disclose information:
• To comply with applicable laws, regulations, or legal processes
• To protect safety, rights, or property of Milenial Procurments Inc., users, or the public
• To enforce our Terms of Service and other agreements
• To investigate and prevent security incidents or fraud

### 4.4 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

## 5. Data Security

### 5.1 Security Measures
We implement industry-standard security measures including:
• Encryption: AES-256 for data at rest and TLS 1.2+ in transit
• Access Controls: Role-based access control and least privilege principles
• Network Security: Firewalls, intrusion detection systems, and DDoS protection
• Regular Audits: Third-party security assessments and penetration testing
• Employee Training: Security awareness and data handling procedures

### 5.2 Incident Response
In the event of a data incident, we will investigate and contain the issue, notify affected users as required by law, report to relevant authorities where required, and take steps to reduce recurrence.

## 6. Data Retention

### 6.1 Retention Periods
• Account Data: Retained while account is active plus periods needed for legal compliance
• Compliance Records: Retained per applicable procurement requirements
• Payment Records: Retained per financial regulations
• Usage Logs: Retained for security and analytics purposes
• Support Communications: Retained for support operations

### 6.2 Deletion
Upon account termination, personal data is deleted or anonymized within a defined period except where retention is required by law.

## 7. Your Rights

### 7.1 Access and Portability
You may request a copy of personal data, export compliance data in a portable format, and access account activity logs.

### 7.2 Correction and Deletion
You may correct inaccurate information and request deletion, subject to legal retention requirements.

### 7.3 Opt-Out Rights
You may unsubscribe from marketing communications and disable non-essential cookies.

### 7.4 California Privacy Rights (CCPA)
California residents may have rights to know, delete, and opt out as provided by applicable law.

## 8. International Data Transfers
Data may be transferred to and processed in the United States with appropriate safeguards.

## 9. Children's Privacy
The Platform is not intended for users under 18, and we do not knowingly collect personal information from children.

## 10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes are communicated through appropriate channels.

## 11. Contact Us
For privacy questions:
• Email: privacy@milenialinc.com
• Mail: Milenial Procurments Inc., Privacy Office
• Data Protection Officer: dpo@milenialinc.com

## 12. Cookie Policy
See our Cookie Policy for details on cookies and tracking technologies used on the Platform.
Back to Legal