mila1. Mila and your data
Mila – Avis Google and milaassistant.com are operated by ReputIA, under the responsibility of RUIZ Anthony, 24 avenue marie curie, 31600 seysses, France. Privacy contact: contact@milaassistant.com. This policy covers Mila accounts, reviews, notifications, subscriptions and this website, separately from other ReputIA services. ReputIA manages account data to provide Mila. Businesses remain responsible for the instructions they give and for informing their customers about review processing on their behalf.
2. Data and purposes
Account data includes your email, user ID and authentication information handled by Supabase. Business data includes the business name, accessible Google account and listing IDs, selected listing and signature. Mila processes the review author’s public name, rating, comment, dates and identifiers, replies and publication status. Technical data and error logs support operation and security.
Mila and RevenueCat process your Mila user ID, product and transaction references, store, trial or subscription status and expiry dates to verify, restore and update access. The purchase SDK may also process necessary technical information, including platform and app version. Mila does not receive your payment card number.
If you allow notifications, a notification token linked to your account and device lets Mila alert you when a reply needs approval. You can disable notifications in your phone settings. These messages are generic and do not contain review text.
Account and review processing is necessary to provide the service you request. Google access requires your revocable OAuth authorisation. Security processing is based on the legitimate interest in protecting the service; legally required retention is based on applicable obligations.
For web subscriptions, Stripe processes your email, billing and payment information. Mila stores Stripe customer and subscription IDs, status, expiry and trial usage to provide access. Full card numbers are not received by Mila. Billing data is processed to provide the subscription and meet applicable legal obligations. Stripe privacy information: https://stripe.com/privacy.
3. Google access and artificial intelligence
Mila requests Google Business Profile business.manage permission to find your businesses, read the selected listing’s reviews and publish or update replies. Although Google describes broader permission, Mila does not use it to delete listings. It does not request Gmail, Drive or contact access.
When AI generation is active, the business name, rating and review text are sent to the OpenAI API to draft a reply. Google tokens, passwords and payment details are not part of that request. Mila adds your signature separately. In approval mode, 4–5-star replies are published automatically and 1–3-star replies require approval. Fully automatic mode allows publication at every rating without individual approval. Published replies are public on Google.
When connecting your listing after reading this information, you authorise this processing and automatic publication for the activated service. Do not place confidential data in signatures or instructions. ReputIA does not use Google data to train general-purpose AI models, sell it, target advertisements or assess creditworthiness. Use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including Limited Use requirements.
4. Providers and access
Google supplies listings and reviews and receives published replies. Supabase provides authentication and database services, Vercel hosts pages and APIs, and OpenAI processes review information for generation. Google Play handles Android purchases; RevenueCat verifies subscription access. Apple handles billing for a version distributed through the App Store. Expo and platform notification services deliver authorised notifications. Providers receive information needed for their services, not for resale by ReputIA. Card details remain with the store and its payment providers.
Providers may process data outside the European Economic Area, including the United States, depending on their infrastructure and contractual terms. Contact ReputIA for the locations and safeguards applicable to your processing. Hosting exclusively in France is not guaranteed. Google authorisation tokens are held on the server and excluded from AI requests. Human access to Google data is limited to cases permitted by Google policy: your explicit agreement, security, legal obligations or permitted use of aggregated data.
5. Retention, withdrawal and deletion
Account information, settings and review history are kept while the account is open to provide the service and your history. Ending a subscription does not delete the account. You can request deletion at any time. Google tokens maintain the authorised connection; revoking access with Google prevents new access.
Open Settings > Delete my account in Mila, or email contact@milaassistant.com from the account email with the subject “Delete my Mila account”, including if you no longer have the app or the option is unavailable. Never send a password. Deletion covers associated account and Google connection data, settings, notification tokens and Mila history.
Removing Google access does not delete your Mila account or published replies. Before deleting your account, cancel a web subscription through Manage my subscription, or an Android subscription in Google Play.
Data may remain in backups until they rotate. Records needed for a legal obligation or dispute may be retained for the legally required period or duration needed for the dispute. Technical logs support incident diagnosis and security. Stores and providers also apply their own retention rules to billing, security and transaction records. Contact us to identify any retained data and the applicable reason for your deletion request.
6. Your rights
Contact contact@milaassistant.com to request access, correction, deletion, restriction or portability, or object where applicable. Provide your account email, never passwords or Google tokens. Proportionate identity checks may be needed. You may complain to the French data protection authority, CNIL (www.cnil.fr). Significant changes to Google data use will be communicated and new authorisation requested where necessary.
7. Website visits
This website links to app.milaassistant.com to create an account, sign in and manage your subscription. Secure web checkout is provided by Stripe. Essential technical storage maintains your login session. With your consent, Vercel Web Analytics measures visits, page views and traffic sources on the website and web workspace, without advertising cookies. URL parameters and sign-in callbacks are excluded. Reviews, account identifiers, passwords and payment details are not sent. Your choice is stored locally for 6 months and can be changed in Cookies and privacy. The current plan provides 30 days of viewable statistics. Email information is used to answer your request.