What we collect
We collect the business information submitted in the form: email, company name, category, city, public profile URL and general business notes.
What not to submit
Do not submit passwords, private customer data, contracts, financial records, health records or confidential legal records.
Why we process it
We process submissions to prepare the requested profile package and validate the public prelaunch flow. The content package is generated by an artificial intelligence model (automated text generation).
Controller
ProfileForBusiness is operated as part of Mill AI. Contact: contact@millai.eu.
Mill AI newsletter
Our websites offer an optional signup for the Mill AI newsletter (practical tips and news from Mill AI tools, at most twice a month). Subscribing is voluntary, separate from using the product, and uses double opt-in: we send a confirmation e-mail and only a confirmed address joins the list. The subscriber list is administered at the Mill AI portfolio level (contact@millai.eu) and stored on encrypted infrastructure in the EU (AWS, eu-central-1). Legal basis: consent (art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every issue or by writing to contact@millai.eu - withdrawal takes effect immediately. We delete unconfirmed signups after 30 days, and after you withdraw consent we keep only an irreversible hash of your address, so that we never contact you again.
Recipients, retention and transfers
Data required to operate the service may be disclosed to categories of providers responsible for hosting, result generation where applicable, delivery, customer support, security and consent-based analytics. Providers may process data only for documented purposes and under applicable contractual safeguards.
Data is kept only for the period necessary for delivery, security, support, legal duties or the exercise of claims, and is then deleted or anonymized.
Where data is transferred outside the EEA, we use an applicable transfer mechanism and supplementary safeguards where required.
Consent choices and current vendors
Necessary, Analytics and Advertising are separate choices. Optional technologies remain off until the choice is recorded. Analytics consent does not enable Advertising, and Advertising consent does not enable Analytics.
Only vendors marked active in the current registry may run after consent for their category.
Your current choice does not authorise a vendor added later. A change to the policy, copy, consent schema or vendor registry requires a new choice.
Necessary
- Purpose
- Required for security, consent storage and core site functions. Always active.
- Domains and endpoints
- https://www.profileforbusiness.com, https://api.profileforbusiness.com/api/consent/receipt
- Browser storage
- millai_privacy_v1_pfb, millai_privacy_v1_pfb_id
- Allowed data
- We store a first-party consent identifier, firm and locale, document and software versions, category choices, choice source, timestamps and a reference to the previous receipt. The browser choice lasts 180 days. The append-only consent receipt is kept for 1095 days to demonstrate and honour the choice.
- Role
- Mill AI is the controller of the consent choice and receipt.
- Retention
- P180D / P1095D
- International transfers
- Vendor agreement and applicable transfer safeguards, including an appropriate transfer mechanism where required.
Analytics
Advertising
No vendor is active in this category under the current registry.
Consent settings
You can change or withdraw either optional choice at any time through Consent settings in the footer. Withdrawal records a new receipt and prevents new optional collection; it does not affect processing that lawfully occurred before withdrawal.
Your data protection rights
Where the GDPR applies and subject to its conditions, you may request access, rectification, erasure, restriction and portability of your data; object to processing; withdraw consent without affecting earlier lawful processing; and lodge a complaint. You also have the rights provided by law in relation to decisions based solely on automated processing that produce legal or similarly significant effects.
Right to complain
Where the GDPR applies, you may lodge a complaint with the competent supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement.