← Back to home

Privacy Policy and Personal Data Processing

Last updated: June 7, 2026

1. Data Controller

The data controller is the owner of the MiLab service (milab.one). Data-related contact: privacy@milab.one.

2. Data We Collect

  • Email and encrypted password upon registration.
  • Device identifier (browser fingerprint) used to count free generations.
  • History of requests and generated scripts (topic, niche, style).
  • Payment data is processed by Stripe; we only store the Stripe customer ID and subscription status.
  • Technical data: IP address, browser type, server function request logs.

3. Purposes of Processing

  • Providing access to the Service and its features.
  • Tracking free-generation limits and preventing abuse.
  • Managing subscriptions and payments.
  • User support and service quality improvement.
  • Compliance with legal requirements.

4. Legal Basis

User consent (GDPR Art. 6), contract performance, legitimate interests of the controller, and legal obligations.

5. Sharing with Third Parties

We share the minimum data necessary with the following processors:

  • Stripe, Inc. — payment processing (stripe.com/privacy).
  • Supabase Inc. — database hosting and authentication.
  • Cloudflare, Inc. — CDN and bot protection (Turnstile).
  • Anthropic PBC — script text generation (topic and parameters are sent).

6. Retention Periods

Account data is stored until the account is deleted. Generation history — up to 24 months. Payment records — for the periods set by tax law.

7. User Rights

You have the right to: access your data, correct it, request deletion, restrict or object to processing, withdraw consent, and lodge a complaint with a supervisory authority. Send requests to privacy@milab.one — we respond within 30 days.

8. Security

We apply encryption in transit (TLS), password hashing, database-level access control (RLS), and protection against brute force and bots.

9. Cookies

We use strictly necessary cookies for authentication and session persistence. Analytical cookies are set only with your consent.

10. Policy Updates

The current version is always available on this page.