What we collect
We collect what you type into the offer form: the service description, client context, problem description, scope items, exclusions, timeline, revision policy, optional price range, the client question and your chosen tone. If you save or unlock a result, we also process your email address.
What not to submit
Do not enter client names, emails, phone numbers, company identifiers, NDA-covered content, financial, medical or legal case data. Use an anonymous description of the situation.
Why we process it
We process the data to generate your offer preview and full offer pack, deliver the result, keep the service secure and improve product quality.
Controller
OfferForBusiness operates as a Mill AI product. Contact: contact@millai.eu.
Mill AI newsletter
Our websites offer an optional signup for the Mill AI newsletter (practical tips and news from Mill AI tools, at most twice a month). Subscribing is voluntary, separate from using the product, and uses double opt-in: we send a confirmation e-mail and only a confirmed address joins the list. The subscriber list is administered at the Mill AI portfolio level (contact@millai.eu) and stored on encrypted infrastructure in the EU (AWS, eu-central-1). Legal basis: consent (art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every issue or by writing to contact@millai.eu - withdrawal takes effect immediately. We delete unconfirmed signups after 30 days, and after you withdraw consent we keep only an irreversible hash of your address, so that we never contact you again.
Recipients, retention and transfers
Data required to operate the service may be disclosed to categories of providers responsible for hosting, result generation where applicable, delivery, customer support, security and consent-based analytics. Providers may process data only for documented purposes and under applicable contractual safeguards.
Data is kept only for the period necessary for delivery, security, support, legal duties or the exercise of claims, and is then deleted or anonymized.
Where data is transferred outside the EEA, we use an applicable transfer mechanism and supplementary safeguards where required.
Consent choices and current vendors
Necessary, Analytics and Advertising are separate choices. Optional technologies remain off until the choice is recorded. Analytics consent does not enable Advertising, and Advertising consent does not enable Analytics.
Only vendors marked active in the current registry may run after consent for their category.
Your current choice does not authorise a vendor added later. A change to the policy, copy, consent schema or vendor registry requires a new choice.
Necessary
- Purpose
- Required for security, consent storage and core site functions. Always active.
- Domains and endpoints
- https://www.offerforbusiness.com, https://api.offerforbusiness.com/api/consent/receipt
- Browser storage
- millai_privacy_v1_ofb, millai_privacy_v1_ofb_id
- Allowed data
- We store a first-party consent identifier, firm and locale, document and software versions, category choices, choice source, timestamps and a reference to the previous receipt. The browser choice lasts 180 days. The append-only consent receipt is kept for 1095 days to demonstrate and honour the choice.
- Role
- Mill AI is the controller of the consent choice and receipt.
- Retention
- P180D / P1095D
- International transfers
- Vendor agreement and applicable transfer safeguards, including an appropriate transfer mechanism where required.
Analytics
Advertising
No vendor is active in this category under the current registry.
Consent settings
You can change or withdraw either optional choice at any time through Consent settings in the footer. Withdrawal records a new receipt and prevents new optional collection; it does not affect processing that lawfully occurred before withdrawal.
Your data protection rights
Where the GDPR applies and subject to its conditions, you may request access, rectification, erasure, restriction and portability of your data; object to processing; withdraw consent without affecting earlier lawful processing; and lodge a complaint. You also have the rights provided by law in relation to decisions based solely on automated processing that produce legal or similarly significant effects.
Right to complain
Where the GDPR applies, you may lodge a complaint with the competent supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement.