Privacy Notice

Effective date: November 9, 2026

This Privacy Notice explains how Millennium Workflows (“Millennium Workflows,” “we,” “us,” or “our”) collects, uses, discloses, retains and protects personal information in connection with the website located at millenniumworkflows.com, including its questionnaire and contact form (together, the “Site”). By using the Site or submitting information through it, you acknowledge that you have read and understood this Notice.

1. Scope

This Notice applies to personal information collected through the Site from prospective clients, clients and other visitors. It does not apply to information that our clients store in applications we build or host for them; that information is addressed in Section 13 and in our agreements with those clients.

2. Information we collect

Information you provide. When you complete the questionnaire or contact form, we collect the information you choose to submit, which may include:

Identifiers and contact details: your name, business name, email address, telephone number and website;
Business information: your industry, team size, years in operation, the tools and systems you use, how your business operates, the challenges you describe, and your goals and timeline;
Preferences: the devices you use, the services you would like an application to connect with, and how you prefer to be contacted;
Files: spreadsheets, documents, images or logos you choose to upload, and any personal information they contain; and
Communications: the content of your messages and our correspondence with you.

Information collected automatically. When you visit the Site, our servers receive technical information that browsers send by default, such as your IP address, browser type, the pages requested and the date and time of the request. We use this information to operate and secure the Site, including to limit repeated or automated form submissions. We do not use analytics, advertising or tracking technologies.

3. How we use information

We use personal information only for the following purposes:

to respond to your inquiries and communicate with you;
to evaluate, scope, plan, quote and deliver the services you request, including designing and building your application;
to manage our relationship with you, including scheduling, project management and invoicing;
to operate, maintain and secure the Site and our systems, and to detect and prevent spam, fraud and abuse;
to comply with applicable law, respond to lawful requests, and establish, exercise or defend legal claims; and
for any other purpose we disclose to you at the time we collect the information, with your consent where required.

We do not sell personal information, and we do not use or disclose it for targeted (cross-context behavioral) advertising.

4. Service providers, including AI tools

We rely on a limited number of service providers that process personal information on our behalf and under our instructions, solely to provide their services to us:

Hosting and infrastructure: DigitalOcean hosts the servers on which the Site and our database run.
AI-assisted tools: we use AI tools, including Claude (provided by Anthropic), to help us review submitted information, plan and design applications, and manage project data. Information may be processed by these tools when we use them for these purposes.

We select providers that maintain appropriate safeguards and limit the information we share with them to what is reasonably necessary. We do not permit them to use your personal information for their own marketing purposes.

5. Other disclosures

Beyond the service providers described above, we may disclose personal information:

Legal and safety: where we believe in good faith that disclosure is required by law, regulation, subpoena, court order or other legal process, or is necessary to protect the rights, property or safety of Millennium Workflows, our clients or others;
Business transfers: in connection with a reorganization, change of legal entity, merger, sale of assets or similar transaction, in which case the information will remain subject to protections consistent with this Notice; and
With your consent: at your direction or with your permission.

6. Where information is stored and processed

Information submitted through the Site is stored in a private database on servers located in Toronto, Canada. Our service providers, including AI tool providers, may process information in the United States or other countries. Where information is transferred across borders, it may be subject to the laws of those jurisdictions.

7. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Notice. In general:

information from prospective clients who do not engage us is deleted or anonymized within 24 months of our last contact;
information relating to client engagements is retained for the duration of the engagement and for a reasonable period afterward to meet our legal, tax, accounting and record-keeping obligations; and
technical server logs are retained only for a limited period for security and troubleshooting.

We may retain information for longer where required by law or to establish, exercise or defend legal claims.

8. Security

We maintain reasonable administrative, technical and physical safeguards designed to protect personal information, including encryption of data in transit (HTTPS), a firewall restricting access to our servers, credentials that are kept on our servers and never exposed to visitors' browsers, access restricted to authorized personnel, and regular backups. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

9. Your choices and rights

Subject to applicable law, you may ask us to:

confirm whether we hold personal information about you and provide a copy of it;
correct information that is inaccurate or incomplete; and
delete your personal information.

To make a request, use the contact page and select “Privacy or data request.” We may need to verify your identity before acting on a request, and we will respond within 30 days, or within any shorter period required by law. Depending on where you live, you may have additional rights under applicable privacy laws; we will honor those rights as required. We will not discriminate against you for exercising any of these rights. In some circumstances we may be permitted or required to retain certain information, and we will explain if that is the case.

10. Cookies and tracking

The Site sets a single, strictly necessary security cookie that protects our forms against cross-site request forgery (an attack in which another website tries to submit a form in your name). Our own staff sign-in area uses one additional, strictly necessary sign-in cookie; it is set only for our staff and never for visitors. We do not use advertising cookies, analytics, tracking pixels or similar technologies. Because we do not track visitors across websites, we do not respond differently to “Do Not Track” browser signals; we treat Global Privacy Control signals as a request not to sell or share personal information, which we do not do in any event.

11. Sensitive information

Please do not submit passwords, Social Security numbers, financial account or payment card numbers, government identification numbers, health information or other sensitive personal information through the Site. Our forms do not request this information. If you include it, we may delete it.

12. Children

The Site is intended for businesses and adults. It is not directed to individuals under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us with personal information, please contact us and we will delete it.

13. Data we handle for our clients

When we build or host an application for a client, the client decides what information is stored in it and how it is used. In that role we process information on the client's behalf and in accordance with our agreement with that client. Individuals whose information is stored in a client's application should direct privacy questions and requests to that client; we will assist our clients in responding as required.

14. Changes to this Notice

We may update this Notice from time to time. When we do, we will revise the effective date at the top of this page. If we make material changes, we will provide notice on this page before the changes take effect and, where required by law, obtain your consent.

15. Contact us

If you have questions about this Notice or our privacy practices, please reach us through our contact page.