Scope and covered apps
This is an umbrella privacy policy that applies to every web app operated by Milgrom Marketing ("we", "us", "our"). Individual apps may link to this policy from their sign-in screens and settings. The apps currently covered by this policy are:
- Focus Flow — A GTD-style task and project manager to capture, organize, and act on your work.
- Pin Feedback — Collect visual, pinned feedback on live sites and designs.
When we add new apps, we'll update the list above. The practices described in this policy apply to all of them.
Information we collect
We collect only what we need to run our apps and give you an account.
Account information (via Google Sign-In)
When you sign in with Google, we receive your Google account email address and basic profile information (your name and profile picture). We use this solely to authenticate you and to create and maintain your account within the app you're using.
App content you create
Some of our apps let you create content (for example, tasks, projects, or feedback pins). That content is stored so we can show it back to you the next time you sign in.
Basic technical information
Our hosting and database providers may automatically log standard technical information such as IP address, browser type, and request timestamps for security, debugging, and abuse prevention.
How we use information
- To create your account and let you sign in.
- To provide the features of the app you're using.
- To keep our apps secure, prevent abuse, and diagnose problems.
- To respond to your support and data deletion requests.
We do not sell your personal data, and we do not use it for advertising.
Google Sign-In and Google user data
Milgrom Marketing's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, information received from Google APIs is used only to provide or improve user-facing features of our apps that are prominent in the requesting app's user interface. We do not transfer that information to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users. We do not use it for serving advertisements, and we do not allow humans to read it unless we have your affirmative agreement for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized for internal operations.
You can revoke our access to your Google account at any time from your Google Account permissions page at https://myaccount.google.com/permissions. Revoking access prevents future sign-ins but does not delete data we already store — use a deletion request (see below) for that.
Storage and security
Account information and app content are stored with reputable cloud hosting and database providers. Data is transmitted over HTTPS. We use provider-managed access controls and follow reasonable technical and organizational measures to protect the information we hold. No system is perfectly secure, and we can't guarantee absolute security.
Data retention
We keep your account information and the content you create for as long as your account is active. If you ask us to delete your account, we delete your account information and associated content from our production systems within 30 days, except where we're required to retain limited records for legal or security reasons.
Deletion requests
You can request deletion of your account and associated data at any time by emailing jordan@milgrommarketing.com from the email address associated with your account. We'll confirm and complete the deletion promptly.
Your rights
Consistent with Canadian privacy law (including the Personal Information Protection and Electronic Documents Act, "PIPEDA"), you may request access to, correction of, or deletion of the personal information we hold about you. To make a request, email jordan@milgrommarketing.com from the email address associated with your account. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.
Cookies and local storage
We use only essential cookies and browser storage needed for authentication and sessions — for example, to keep you signed in and to remember basic preferences within an app. We do not use advertising cookies or cross-site tracking cookies, and we do not sell or share this information with third parties for advertising purposes.
Where data is stored
Your data may be stored and processed in Canada and/or the United States by our cloud hosting, database, and authentication service providers. Regardless of location, we require our providers to handle your information under appropriate security and confidentiality commitments.
Third-party services
We don't share your personal information with third parties for their own purposes. We do rely on a small number of service providers to run our apps, including:
- Cloud hosting and application infrastructure providers.
- Managed database and storage providers.
- Google, for Google Sign-In authentication.
These providers only process data on our behalf and under their own security and privacy commitments.
Children's privacy
Our apps are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes, we'll update the "Last updated" date at the top of this page. Continued use of our apps after an update means you accept the revised policy.
Contact
Questions about this policy or your data? Email jordan@milgrommarketing.com.