Last updated: 12 October 2026
This policy explains what personal data Millisave processes when you visit millisave.com or use the Millisave app for iOS and Android, why we process it, who can see it, and what you can ask us to do with it. It uses plain language on purpose. If something here does not match what you see in the product, tell us at privacy@millisave.com.
1. Who we are and our role
Millisave is operated by Millisave Consult, a limited liability company registered in Tunisia, with its headquarters at The Entrepreneurial Factory, Textile Technopole of Monastir, Khniss 5011, Tunisia. In this policy, "Millisave", "we" and "us" mean Millisave Consult.
Millisave is a B2B platform for procurement and sales operations. You normally use it because your employer or another company (your "company") has a Millisave workspace and gave you an account. This affects who is responsible for your data:
- Business content in your company's workspace (for example requests, orders, quotations, customers, contacts, campaigns, chat messages): your company decides what is entered and why. For this content Millisave acts on your company's behalf, to run the service.
- Account and security data (for example your sign-in, the records that protect your account, and the consent records described below), and visitors to our website: Millisave decides how this data is used.
If your company is responsible for some of your data, you can also contact your company administrator about it.
2. Scope
This policy applies to:
- the Millisave website at millisave.com, including the demo request form; and
- the Millisave mobile app for iOS and Android. The app uses the same account as the Millisave web platform; there is no separate sign-up in the app.
The web platform your company uses day to day is covered by the same principles. Our Terms and Conditions and Cookie Policy on millisave.com also apply.
3. Data we process
3.1 Account data
Your name, work email address, phone number, position, profile photo, company, language preference and your Millisave user ID. This is created by you or by your company administrator.
3.2 Business content you or your company create
Whatever you enter or upload while using the service. In the app this includes purchase requests, orders and quotations; products; customers and their contacts (names, email addresses, phone numbers, postal addresses, map pins); groups and campaigns (content and recipients); CRM opportunities and activities; chat messages, comments and remarks; and attachments such as PDF, Word and Excel files. Videos in the product catalogue are links only; the app does not upload video files.
3.3 Photos, voice notes and files (only when you choose to add them)
The app asks for permission before it uses the camera, the microphone or your photo library. It uses them only when you take or pick a photo (for example a product image, a campaign banner, visit feedback), or record a voice note (up to 120 seconds) for an activity or visit. Only the photos you pick and the recordings you make are uploaded, to your company's Millisave workspace. The app does not read your device address book.
3.4 Location
The app can read your location once, when you take a specific action: starting or ending work, completing an activity or visit, giving driver feedback, using "Nearest customers", or setting a customer's map pin with "My location". It does not track your location in the background in this version.
- When a position is saved we store latitude, longitude, accuracy, the capture status, the time and the time zone. Where relevant we calculate the distance to the customer.
- If you grant only approximate location on your device, we store the approximate position.
- Start work, end work and visit-completion positions are visible to managers in your company (for example in the timesheet and Live GPS views), according to their role.
- You can withdraw location consent in the app under Profile > Tracking & privacy, and at any time in your device's operating-system settings.
We also keep a record of your tracking-consent decisions: the decision, the time, the version of the policy shown, and the IP address and device user agent used when you decided.
3.5 Technical data
- A sign-in token. In the app it is kept in the device's secure storage (iOS Keychain or Android Keystore).
- A random per-installation identifier that the app generates the first time it runs. It is sent when you sign in so we can recognise your device for security purposes. It resets if you reinstall the app.
- IP address and device user agent in our server logs.
- Error records tied to your user ID when a request fails, so that we can investigate problems.
- The app version and platform, where the app sends them.
3.6 Website visitors
- Demo request form: your name, work email address, phone number, an optional message and your preferred date and time. We use it to contact you about a demo, and we record it in our own sales CRM.
- Server logs: IP address, device and browser information, and the pages requested.
- First-party visit measurement: when you click a key button (such as "Request a demo") or arrive through a tracked link, the site sets a short-lived first-party cookie and records the pages you view in that visit. If you then submit the demo form, that browsing can be linked to your request so our team knows what you were interested in.
Our Cookie Policy on millisave.com describes cookies and similar technologies in more detail and how to control them in your browser.
4. What we do not do
- We do not sell your personal data.
- The Millisave app does not contain advertising and does not track you across other companies' apps or websites. The app does not ask for tracking permission.
- The app does not collect your location in the background in this version.
- The app does not read your address book.
- The app does not include analytics or crash-reporting software from third parties.
5. Why we process your data and our legal bases
| Purpose | Examples |
|---|---|
| Provide the service your company uses | Sign-in, requests, orders, quotations, customers, campaigns, chat, approvals, location features you start, notifying your colleagues |
| Keep accounts and the platform secure | Authentication, device recognition, abuse and fraud prevention, audit trails |
| Support and improve the service | Answering your questions, investigating errors, fixing problems |
| Respond to website visitors | Arranging demos, replying to messages |
| Meet legal obligations | Responding to lawful requests, keeping records the law requires, exercising or defending legal claims |
Depending on the purpose and on where you live, the legal basis for this processing is the performance of a contract, our or our customers' legitimate interests in running and securing a business platform, compliance with a legal obligation, or your consent where the law requires it (for example for location, camera and microphone access, which you can refuse or withdraw on your device).
6. Who can see your data
- Authorised users in your company, according to the role and permissions your company administrator gives them. Managers in your company can see your start-work, end-work and visit-completion positions.
- Other companies you work with in the platform, only for what you or your company deliberately share with them (for example a request for quotation sent to a supplier, or a catalogue shared with a customer). Your company's data is otherwise separated from other companies' data.
- Millisave staff, only where needed to run, secure and support the service, under controlled access.
- Service providers that process data for us (section 7), and authorities where the law requires it.
7. Service providers (sub-processors) and other third parties
We use the following kinds of providers to run Millisave. They may process personal data on our behalf, only to provide their service to us.
| Provider or type | What it is used for | When |
|---|---|---|
| Amazon Web Services (AWS) | Hosting of the platform, data and files | Always |
| Email delivery provider | Sending system emails and campaign emails | When an email is sent from the platform |
| WhatsApp (Meta) | Sending WhatsApp messages | When a campaign or reminder uses WhatsApp |
| AI model providers | Generating suggestions, summaries and analysis from data in your company's workspace | Only when your company enables AI features |
| Google Places | Looking up business information on our servers | When a lookup feature is used |
Services contacted from your device. Some features of the app call a third party directly from your phone when you use them:
- OpenStreetMap Nominatim receives the address text you type when you search for a place on a map.
- Google Maps receives the position shown on a map, and when you choose "Open in Maps".
- YouTube or Vimeo are contacted when you play a product video.
Those services have their own privacy policies. The app tells you before it opens them.
8. International transfers
Millisave Consult is based in Tunisia, and our customers and users are in several countries. Your data may therefore be processed in a country other than the one where you live, including by our service providers. Where the law requires safeguards for such a transfer, we use appropriate ones.
9. How long we keep data
We keep personal data for as long as it is needed for the purposes in this policy, including as long as your company's account is active, and afterwards where the law requires it or where it is needed to resolve disputes. Business records (such as orders, approvals and quotations) belong to your company's workspace and are kept according to your company's instructions.
| Data | How it is kept |
|---|---|
| Account data | While your account exists in your company's workspace |
| Business content, photos, voice notes, attachments and chat messages | With the business record they belong to |
| Location positions (start / end work, visits) | With the timesheet or activity record they belong to |
| Tracking-consent records | As evidence of your consent decisions |
| Server logs and error records | For security and troubleshooting |
| Sign-in tokens | Until you sign out, or the token expires or is revoked |
| Demo request details | While we handle your request and for our sales records |
10. Your rights and choices
Subject to the law that applies to you, you can ask us to:
- give you access to the personal data we hold about you;
- correct data that is wrong or incomplete (you can also update your profile in the product);
- delete your data (see section 11);
- limit or object to certain processing, and, where we rely on consent, withdraw that consent; and
- receive your data in a commonly used format, where the law gives you that right.
In the app you can also: withdraw location consent under Profile > Tracking & privacy; turn off camera, microphone, photo or location access in your device's settings; and sign out at any time. Switching these off may mean the related feature (for example attaching a photo or recording a voice note) stops working.
To use a right, email privacy@millisave.com from the address on your account, or ask your company administrator. We may need to confirm your identity first. If your data is controlled by your company, we may refer your request to it. You can also complain to your local data protection authority.
11. Deleting your account and data
You can ask us to delete your Millisave account and the personal data linked to it. The same steps are on our Delete your Millisave account page.
- Email privacy@millisave.com with the subject "Delete my Millisave account". Send it from the email address of your account and include your company name. If you cannot sign in, tell us that in the email.
- We confirm your identity, tell your company administrator, and confirm to you that we received the request.
- We delete or anonymise your personal profile data, such as your name, contact details and photo, and end your sign-in sessions.
- We tell you when the request is complete.
Business records that your company created with you (for example orders and approvals) belong to your company's workspace. They may stay in the workspace so that your company keeps its own accounting and audit records, but they are no longer tied to your personal details where that is possible. Some data may also be kept where the law requires it.
12. Security
We protect data with measures that include encryption in transit (TLS), storing the app's sign-in token in the device's secure store, role-based access so people see only what their role allows, separation between companies' workspaces, and audit trails of important actions. No system is completely secure. Keep your password and your device safe, and tell us right away if you think your account has been misused.
13. Children
Millisave is a business tool. It is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you think a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy, for example when the product or the law changes. We will change the "Last updated" date at the top of this page. If a change is significant we will also tell you in a suitable way, such as in the app or by email to your account address, before it applies where we can.
15. Contact us
Millisave Consult
The Entrepreneurial Factory, Textile Technopole of Monastir, Khniss 5011, Tunisia
Privacy questions and requests: privacy@millisave.com
