Privacy Policy

1. Information we process

Depending on the modules a business owner enables, Millennium may process account and business profile information, authorized team members and permissions, customer contact and service-request information, schedules, jobs, invoices, payment records, usage-credit records, support requests and security/audit events.

2. Google and Gmail data

When an owner chooses Connect Gmail, Google asks that owner for permission before Millennium can access Gmail. Millennium uses authorized Gmail data only to provide the features the owner selected, including:

• reading and displaying messages inside the private Millennium Inbox;
• searching, filtering and classifying messages such as leads, customers, payments, appointments, urgent mail and spam;
• creating short summaries and professional reply drafts;
• sending a message through Gmail only after the authorized owner approves it, unless that owner later enables a clearly disclosed automation rule.

Millennium does not use Google Workspace data for advertising, does not sell it, and does not allow humans to read it except when the owner asks for support, where required for security, or where legally required. Use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

3. AI processing

Relevant message text or business instructions may be sent to an approved AI provider to classify, summarize or draft a response. Millennium minimizes the content sent, separates trusted instructions from untrusted message content, records the action, and keeps owner approval boundaries for consequential email, calling, dispatch and payment actions. AI output may be inaccurate and must be reviewed where the interface requests confirmation.

4. Calls, SMS and receptionist data

If Millennium Receptionist is enabled, Millennium and its communications provider may process phone numbers, call events, customer responses, scheduling details and dispatch status. The automated assistant must disclose that it is automated. Recording and owner-derived voices are not enabled without separate consent, rights verification and applicable notices.

5. Payments and usage credits

Stripe processes card and bank information through Stripe-hosted pages. Millennium does not receive or store full card numbers or the customer's Stripe password. Millennium stores transaction references, status, amounts, fees, refunds, connected-account references and the business's dollar-denominated usage ledger as needed to provide payment and accounting features.

6. How information is used

• provide, secure and support selected Millennium modules;
• authenticate users, enforce tenant separation and role permissions;
• perform owner-approved workflows and maintain audit evidence;
• meter usage, prevent duplicate charges and reconcile transactions;
• detect abuse, investigate incidents and comply with law;
• improve reliability using minimized and aggregated operational information.

7. Sharing and service providers

Information is shared only with providers needed to deliver enabled services, such as hosting, database/authentication, Google, Stripe, Twilio, AI, email delivery, monitoring and security vendors. These providers process information under their own terms and our configured service relationship. We may also disclose information when legally required or during a properly protected business transfer.

8. Retention and deletion

We retain information while an account is active and as reasonably needed for the service, security, dispute resolution, financial records and legal obligations. Owners may disconnect Google access at any time in Millennium or in their Google Account. See the Data Deletion Instructions to request account or Google-data deletion. We delete or de-identify eligible information after verifying the request, subject to required financial, fraud-prevention or legal retention.

9. Security

Millennium uses tenant isolation, role-based access, encrypted provider tokens, signed webhooks, audit records, idempotency controls, approval gates and fail-closed provider configuration. No service can guarantee absolute security. Report suspected unauthorized access promptly.

10. Choices and rights

Owners can choose which modules to enable, control employee access, disconnect Gmail, stop receptionist activity, limit usage spending, request access or correction, and request deletion where applicable. Privacy rights may vary by location.

11. Children

Millennium is a business service and is not directed to children under 13.

12. Changes

Material changes will be posted here with an updated effective date. Where required, we will provide additional notice or request renewed consent.

13. Contact

Privacy and data requests: millenniuminnovationn@gmail.com. Operator: Millennium Innovation FL LLC, Florida, United States.