Last updated: 11 July 2026 · ExMill (app.exmill.co)
Account details (name, email, business name), the business data you enter or upload (pricing, shipments, financial records, documents), and technical logs (errors, audit events) needed to run and secure the service. Passwords are stored only as bcrypt hashes; two-factor secrets are stored encrypted at rest by our database provider.
Solely to provide the service: rendering your workspace, computing prices, syncing integrations you connect, and sending emails you request (reports, alerts). We do not sell your data or use it for advertising.
Documents you upload for extraction and questions you ask the assistant are processed by third-party AI providers (Anthropic, Google) under their API terms, which do not permit them to train on this data. Extracted results are stored in your workspace.
Data is stored in Google Cloud Firestore and served via Vercel. Uploaded documents are stored alongside the records they belong to. Backups are retained for disaster recovery.
Your data is isolated per enterprise. Only users you invite can access your workspace, subject to the permissions you assign. Our operators access customer data only for support you request or to investigate incidents, and access is logged.
Export everything at any time (Settings → Data & Privacy → Export all data). Request correction or deletion by emailing us; deletion removes your data from production within 30 days. You may also request a copy of the audit trail of actions in your workspace.
We use a single session cookie for sign-in. No advertising or cross-site tracking cookies.