Effective date: July 21, 2026

Who is responsible for your data

Millowi is an independently operated online community service based in Romania. For purposes of applicable data protection law, Millowi is the controller of the personal data described in this policy. Privacy questions and requests may be sent to privacy@millowi.com.

Information we collect

• Account data: username, email address, password hash, verification status, age and legal-policy confirmation timestamps, account type, business category, and settings.
• Profile and content data: biography, website, avatar, profile statuses, posts, comments, stories, images, communities, reactions, bookmarks, follows, reposts, and other material you submit.
• Communication and safety data: private messages, notifications, reports, report details, blocks, moderation decisions, support correspondence, and records needed to investigate abuse.
• Technical and usage data: IP address, browser and device information, request and security logs, session identifiers, page and content interactions, and daily post or profile view records.
• Business and campaign data: if campaign tools are made available, business name, campaign name, objective, audience description, budget, dates, ad copy, destination URL, and review status.

We receive this information from you, from your use of Millowi, from other users who interact with or report content, and from providers that help us operate and secure the service. Please do not submit sensitive personal data unless it is necessary and appropriate for the feature you are using.

Why we process personal data

• To perform our agreement with you: create and secure accounts, publish content, operate communities, deliver messages and notifications, and provide requested features.
• For legitimate interests: prevent spam, fraud, and abuse; protect users and the service; measure content reach; troubleshoot problems; enforce rules; and improve reliability and usability. We consider the impact on your rights before relying on these interests.
• To comply with legal obligations: respond to valid legal requests, preserve required records, and meet applicable safety, consumer, and data-protection duties.
• With consent: where applicable law requires consent for a particular optional feature or technology. You may withdraw consent without affecting earlier lawful processing.

Public content and private communications

Usernames, profiles, profile statuses, posts, comments, communities, reactions, follower relationships, active stories, and uploaded media are generally public and may be indexed by search engines or copied by others. Profile statuses expire after 24 hours. Do not publish information you want to keep private. Story authors can see the identities of signed-in viewers. Expired stories remain in a private archive available only to their author unless the author deletes them. Direct messages are available to conversation participants and may be accessed by authorized personnel when necessary to investigate a report, protect the service, comply with law, or resolve a technical problem.

When we share information

We do not sell personal data. We may disclose data:

• to other users and the public when you use public features;
• to moderators where needed to review community reports and enforce rules;
• to infrastructure and hosting providers, including Railway and Cloudflare R2;
• to communications providers, including Resend for transactional email and Namecheap Private Email for support mail;
• to content-delivery and embedded-content providers, such as jsDelivr, cdnjs, and YouTube, when the website or native app loads their resources; in the native app, a privacy-enhanced YouTube player loads only when you open or preview a post containing a supported YouTube link;
• to advisers, authorities, or other parties where reasonably necessary to protect rights, investigate abuse, comply with law, or respond to valid legal process; and
• as part of a reorganization, financing, acquisition, or transfer of the service, subject to appropriate safeguards.

International transfers

Some providers may process data outside Romania or the European Economic Area. Where required, we rely on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. You may contact us for more information about safeguards relevant to your data.

How long we keep information

Account and active content data is generally kept while your account is active. When you delete your account, associated data is removed from active systems as provided by the service, subject to limited exceptions. Reports, moderation records, security logs, support correspondence, and removed content may be retained for as long as reasonably necessary to prevent abuse, resolve disputes, establish or defend legal claims, or meet legal obligations. Residual copies may remain temporarily in backups until those backups are overwritten. We delete or anonymize information when it is no longer needed for these purposes.

Your rights

Depending on applicable law, including the GDPR, you may have rights to be informed, access your data, correct inaccurate data, request deletion or restriction, receive portable data, object to certain processing, withdraw consent, and request human review of a decision based solely on automated processing that produces legal or similarly significant effects. Millowi does not currently make such significant decisions solely through automated processing.

Authenticated users can download a portable JSON copy of their account data from Settings. Other requests may be sent to privacy@millowi.com. We may need to verify your identity. You may also complain to the Romanian National Supervisory Authority for Personal Data Processing or another competent supervisory authority.

Children

Millowi is intended only for people aged 16 or older. We do not knowingly permit children under 16 to create accounts. If you believe a child under 16 has provided personal data, contact privacy@millowi.com.

Security

We use administrative, technical, and organizational measures designed to protect personal data. No online service can guarantee absolute security. Report suspected vulnerabilities privately to security@millowi.com.

Changes to this policy

We may update this policy as Millowi changes or legal requirements develop. We will update the effective date and provide additional notice when a change materially affects your rights or how we use personal data.

Contact

General support: support@millowi.com
Privacy requests: privacy@millowi.com
Legal notices: legal@millowi.com