Privacy

What Milo stores, who can see it, and which services run it. Effective 24 September 2026.

The product

Milo is an organization workspace for designing emails. You sign in, join or create a workspace, then write with the AI designer and a visual editor. Brand kits, media, and email versions live with that workspace.

Account data

Sign-in and billing run through Clerk. Clerk holds the account you create there, such as name, email address, profile image, organization membership, and plan. Milo reads that identity to know who you are, which workspace you are in, and which plan limits apply.

Workspace data

Emails, version history, brand kits, uploaded files, and last-editor labels live in Convex, scoped to your Clerk organization. Members of that organization can read and edit that workspace data. People outside it cannot, unless you share a public preview link.

AI designer

When you use the AI designer, Milo sends the prompt, the current email, and brand kit details to a model through Vercel AI Gateway so the editor can write or edit the template. Do not put secrets in chat that you would not put in the email.

Test emails

From the editor you can send a test of the current draft to an email address already on your account. Milo sends the rendered HTML and that address to Resend, which delivers the message. The subject starts with Test. Milo does not keep a separate copy of the sent test.

Public preview links

A shared preview link shows a read-only copy of that email to anyone who has the URL. Treat the link like a public page. Revoke it in the product when you no longer want it open.

Uploaded images

Images you upload are served at a public URL that contains the file id. Email HTML needs that URL so inboxes can load the image. Anyone who has the URL can fetch the file. The response allows any site to display it and asks browsers to cache it for one year. Deleting the image in Milo removes it from the library. A browser or inbox that already saved the URL can keep showing the file until that cache expires.

Processors

The product uses Clerk for authentication and billing, Convex for the database and file storage, Resend to deliver test emails, and Vercel to host the app and to call the AI model. When you allow analytics, PostHog receives page views, product usage, and error reports. If you choose necessary only, PostHog may still receive cookieless traffic counts that are not tied to your account. Those companies process data as needed to run those parts of the service. We do not sell workspace content.

Retention

Emails, brand kits, and images stay until you delete them in the product. When an organization is deleted, Milo hides that workspace and deletes its emails, brand kits, images, and AI credit history after 7 days. Account records follow Clerk's account lifecycle.

Cookies

Necessary cookies stay on so sign-in and the product can work. Analytics is PostHog. Allow it for cookies plus page views, product usage, and error reports. If you choose necessary only, PostHog sets no cookies and still measures traffic in a privacy-preserving cookieless way. The choice is stored in a cookie named milo-consent. Change it from Cookies in the footer.

Contact

Questions about this policy can go to support@milostudio.app.

Related

Product use is described in the Terms .