Back
|

MilestoneHub — Privacy Policy

Effective Date: 22/03/2026
Last Updated: 22/03/2026


1. Introduction

MilestoneHub Inc. ("MilestoneHub", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and protect personal information in the course of providing our platform and services (the "Services").

This policy is designed to comply with applicable privacy laws, including Québec's Act respecting the protection of personal information in the private sector (Law 25) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

Your use of the Services is also governed by our Terms of Service, available at milestonehub.com/terms, which includes additional obligations relating to your own data handling responsibilities as an account holder.

By using the Services, you agree to the collection and use of information in accordance with this policy.


2. Information We Collect

2.1 Information Provided by You

  • Account Data: Name, email address, business name, phone number, billing information
  • Support Data: Information provided through support requests or communications
  • User Content: Data, content, contacts, and materials uploaded or created within the platform

2.2 Information Collected Automatically

  • Usage Data: IP address, browser type, device information, pages visited, interactions
  • Log Data: System activity, diagnostics, and performance data
  • Cookies and Tracking Technologies: Used to operate, analyze, and improve the Services

2.3 Communications Data

If you use messaging features:

  • message content
  • recipient information
  • delivery and engagement data

2.4 Special Note on SMS and Phone Numbers

We collect phone numbers for account verification, security (including two-factor authentication), and to enable messaging features.

Mobile information and phone numbers collected for SMS purposes will not be shared with third parties or affiliates for their own marketing or promotional purposes.


3. Purposes of Collection

We collect and use personal information for the following purposes:

  • to provide and operate the Services;
  • to process transactions and manage billing;
  • to enable communication features (email, SMS, etc.);
  • to provide customer support, configuration assistance, and coaching services related to use of the platform;
  • to improve and optimize the platform;
  • to ensure security and prevent fraud;
  • to comply with legal obligations;
  • to communicate with you, including service updates and optional marketing communications.

Where personal information relates to end clients of account holders — meaning individuals who receive coaching or other services from our account holders through the platform — MilestoneHub processes that data solely as a data processor on behalf of the account holder. Account holders are responsible for ensuring that their collection and use of their clients' data complies with applicable law.


4. Consent

By using the Services, you consent to the collection, use, and disclosure of your personal information as described in this Policy.

Where required by law:

  • consent is requested in a clear and specific manner;
  • consent may be withdrawn at any time, subject to legal or contractual restrictions.

For optional marketing communications, we rely on express or implied consent as defined under Canada's Anti-Spam Legislation (CASL). You may withdraw consent to marketing communications at any time.


5. Role of MilestoneHub (Controller vs Processor)

  • MilestoneHub acts as a data controller for information related to your account and your use of the platform.
  • MilestoneHub acts as a data processor for personal information that you collect, store, or process through the platform about your own clients.

You are solely responsible for ensuring that your use of the platform to collect and process personal information about your own clients complies with all applicable privacy and data protection laws.


6. AI-Powered Features and Data

6.1 How AI Features Use Data

The Services include features powered by artificial intelligence. When you use AI features, content you submit — such as text prompts, contact data, or uploaded materials — may be processed by AI systems, including those operated by third-party AI service providers, in order to generate outputs.

6.2 AI Training

MilestoneHub does not use your personal information or your clients' personal information to train its own AI models. Third-party AI providers engaged by MilestoneHub may have their own data usage policies. We select providers whose terms are consistent with our obligations under applicable privacy law and require contractual protections where required.

6.3 AI Output

AI-generated outputs are not verified by MilestoneHub and do not constitute personal information collected by MilestoneHub. You are responsible for how you use, share, or act on AI-generated content, including ensuring it complies with applicable privacy laws before distribution.

6.4 Third-Party AI Providers

Personal information processed through AI features may be transmitted to third-party AI service providers outside Québec and Canada.


7. SMS and Email Communications

7.1 MilestoneHub Communications

If you opt in, we may send:

  • service-related notifications;
  • product updates;
  • promotional and marketing communications.

Marketing communications are sent only with your express or implied consent as required under CASL. You may opt out at any time:

  • Email: via the unsubscribe link included in each message
  • SMS: by replying STOP

Standard carrier rates may apply.

7.2 Account Holder Responsibilities

You (the account holder) are responsible for:

  • obtaining proper consent from your contacts before sending any communications;
  • complying with Canada's Anti-Spam Legislation (CASL) and all other applicable anti-spam and telemarketing laws;
  • maintaining your own Privacy Policy if you collect personal information from your clients.

8. Disclosure of Personal Information

We do not sell personal information.

We may disclose information to:

  • Service Providers: hosting, infrastructure, analytics, and AI providers engaged to deliver the Services
  • Payment Processors: for billing and transactions
  • Telecommunications Providers: for messaging and calling functionality
  • Legal Authorities: where required by applicable law

All disclosures are limited to what is necessary for the stated purpose.


9. Third-Party Processing and Cross-Border Transfers

MilestoneHub uses third-party providers to deliver the Services. These providers may process personal information outside Québec and Canada, including in jurisdictions that may have different data protection standards.

This includes:

  • platform infrastructure providers (e.g., LeadConnector);
  • cloud hosting providers;
  • communications and messaging providers;
  • AI and analytics services.

Before engaging third-party providers that process personal information outside Québec, MilestoneHub conducts privacy impact assessments as required under Law 25 and implements contractual safeguards to ensure that personal information receives an adequate level of protection. These assessments take into account the sensitivity of the information, the purpose of the transfer, and the legal framework of the destination jurisdiction.


10. Data Retention

We retain personal information only as long as necessary:

  • Account Data: for the duration of your subscription
  • Post-Termination: typically retained for up to 30 days following account termination, then deleted or anonymized
  • Legal Retention: longer periods where required by applicable law

Upon request, we will use commercially reasonable efforts to delete or anonymize your personal information, subject to any legal obligations requiring retention.


11. Security Safeguards

We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:

  • access controls and authentication measures;
  • encryption where appropriate;
  • monitoring and security practices.

No system can be guaranteed to be completely secure. In the event of a security incident, we will act in accordance with Section 12 of this Policy.


12. Your Rights

Under applicable law, including Law 25 and PIPEDA, you may have the right to:

  • Access your personal information held by MilestoneHub;
  • Correct inaccurate or incomplete data;
  • Withdraw consent to the collection or use of your personal information, subject to legal or contractual restrictions;
  • Request deletion of your personal information, subject to applicable legal retention obligations;
  • Request portability of your personal information in a technology-neutral, structured format.

We will respond to rights requests within 30 days of receipt, as required under Law 25. Where a request is complex or numerous, we may extend this period and will notify you accordingly.

Requests may be submitted to the Privacy Officer using the contact details in Section 18.


13. Confidentiality Incidents

In the event of a confidentiality incident involving a risk of serious harm:

  • we will take prompt steps to investigate and mitigate the risk;
  • we will notify affected individuals and the Commission d'accès à l'information (CAI) where required under Law 25;
  • we maintain a register of confidentiality incidents as required by law.

14. Automated Decision-Making

Where the Services use automated decision-making that produces legal or significant effects:

  • you will be informed of the use of automated decision-making;
  • you may request information about how decisions are made, to the extent required by applicable law;
  • you may request human review where available and required by law.

15. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • operate and secure the Services;
  • analyze usage and performance;
  • improve the platform experience.

You can control or disable cookies through your browser settings, though doing so may affect the functionality of the Services.


16. Third-Party Services

The Services may integrate with third-party platforms. These providers operate under their own privacy policies. MilestoneHub is not responsible for their practices beyond our contractual and legal obligations.


17. Privacy by Default

Where the Services include privacy settings, the most protective settings are applied by default, unless adjusted by the user, in accordance with the privacy by default principle under Law 25.


18. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material — including changes that expand the purposes for which we use personal information or that reduce your rights — we will provide at least 30 days' prior notice before the changes take effect.

Continued use of the Services after the effective date of any updated Policy constitutes your acceptance of the changes.


19. Privacy Officer

Privacy Officer: Jennifer Linton
Email: privacy@milestonehub.com
Address: 1235 Notre-Dame St O, Unit #123, Montréal, QC H3C 0B1


20. Contact

MilestoneHub Inc.
1235 Notre-Dame St O, Unit #123
Montréal, Québec, Canada
H3C 0B1

Email: support@milestonehub.com
Phone: +1 888-272-2961


MilestoneHub Inc. — Privacy Policy — v2.0 — 22/03/2026