1. Introduction

Milani AI Technologies ("we," "us," or "our") operates ComplyStack, an AI-powered compliance document generation platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

Account information: name, email address, and password when you create an account
Business information: business name, type, state, and employee count used to generate compliance documents
Intake responses: answers to document-specific questions (e.g., safety coordinator name, emergency contacts, business processes)
Payment information: processed securely through Stripe; we do not store credit card numbers

2.2 Information Collected Automatically

Usage data: pages visited, features used, documents generated, and interaction patterns
Device information: browser type, operating system, and screen resolution
Analytics data: collected through PostHog for product improvement

3. How We Use Your Information

We use your information to:

Generate customized compliance documents based on your business details
Process payments and manage your subscription
Improve our Service, AI models, and document quality
Communicate with you about your account, updates, and support
Detect and prevent fraud or abuse
Comply with legal obligations

4. AI Document Generation

When you generate a document, your business information and intake responses are sent to our AI provider (Anthropic) to create your document. This data is used solely for document generation and is not used to train AI models. Generated documents are stored in your account for your access.

5. Data Sharing

We do not sell your personal information. We share data only with the following service providers who assist in operating the Service:

Anthropic: AI document generation (business details and intake responses)
Stripe: payment processing (billing and subscription management)
PostHog: product analytics (usage patterns, anonymized)
Railway: cloud infrastructure (application hosting and database)

We may also disclose information if required by law, regulation, or legal process.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure password hashing (bcrypt), and JWT-based authentication. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account information and generated documents for as long as your account is active. If you cancel your account, we will delete your data within 30 days, except where retention is required by law. You may request deletion of your data at any time by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your data
Object to or restrict certain processing
Data portability (receive your data in a structured format)
Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@milaniai.tech.

9. Cookies

We use essential cookies for authentication and session management. Our analytics provider (PostHog) may use cookies or similar technologies to collect usage data. You can control cookie preferences through your browser settings.

10. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@milaniai.tech.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions or concerns about this Privacy Policy or your data, contact us at:

privacy@milaniai.tech

Milani AI Technologies
ComplyStack is a service of Milani AI Technologies.