DRAFT — for owner and attorney review before publishing. Not legal advice.

Privacy Policy — Milo Marketing Engine

Effective date: June 29, 2026

This Privacy Policy explains how Milo Marketing Engine ("Milo Marketing Engine,"

"the Engine," "MME," "we," "us," or "our") collects, uses, shares, and protects

information when you visit our site at mitchandmilo.com (and related subdomains),

"Service"). Milo Marketing Engine is operated by Mitchell White (South

Mississippi) and marketed as *"by Mitch & Milo."*

If you do not agree with this Policy, please do not use the Service. Your use of

the Service is also governed by our Terms of Service.

1. Who this Policy covers

Customers — Realtors, teams, and brokerages who subscribe to the Service.
Visitors — anyone who browses our site or submits a form/inquiry.
Contacts you upload — the people in lists or databases that a Customer

uploads to the Service (see Section 8). For these contacts, the Customer is the

controller of the data; we act as a service provider/processor on the

Customer's behalf.

2. Information we collect

a. Account information. Name, business/brokerage name, email address, phone

number, and login credentials you provide when you create an account or check out.

b. Intake data. Information you provide in our customer intake form after

checkout — for example, brand details (logo, colors, voice/tone), market and

service area, real estate license state and number and status, brokerage

affiliation and required disclaimers, MLS membership and advertising rules,

target client type, goals, listing details, CRM in use, social handles, website

URL, sending-domain status, approval/cadence preferences, and content

preferences.

c. Uploaded contact data. Contact lists or CRM databases you choose to

upload (for example, names, emails, phone numbers, lead source, and notes about

your past clients and leads). See Section 8 for how this is handled.

d. Usage data. Information about how you interact with the Service and our

site — for example, pages viewed, features used, content approvals/sends, log

data, device and browser type, IP address, and timestamps.

e. Payment information. Payments are processed by Stripe. We do not

collect or store your full card number. We receive limited billing details from

Stripe (such as a customer ID, subscription/plan, the last four digits of your

card, card brand, billing status, and invoice history) needed to manage your

subscription.

f. Communications. Emails, support requests, and other messages you send us.

3. How we use information

We use information to:

Provide, operate, and deliver the Service, including generating and delivering

your marketing content and follow-up automations from your intake data.

Create and manage your account and subscription.
Process payments, renewals, refunds, and billing notices (via Stripe).
Send service and transactional messages (receipts, delivery notices, onboarding,

billing-failure/dunning notices, and account updates).

Provide customer support and respond to your requests.
Operate compliance and quality checks on generated content.
Improve, secure, and troubleshoot the Service.
Send marketing communications about the Service where permitted — you can opt

out at any time (see Section 9).

Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not sell the contact data

you upload.

4. Legal bases (where applicable)

Where required by law (for example, under GDPR-style frameworks), we rely on one

or more of the following legal bases: performance of a contract with you;

your consent; our legitimate interests in operating and improving the Service;

and compliance with legal obligations. {{governing_state}} and other applicable

laws may also apply. (Governing state: Mississippi.) *(Owner/attorney to confirm which frameworks apply to the

Customer base.)*

5. Subprocessors and sharing

We share information with trusted service providers ("subprocessors") only as

needed to run the Service. Current subprocessors include:

| Subprocessor | Purpose | Data involved |

|---|---|---|

| Stripe | Payment processing, subscriptions, billing | Billing/payment data |

| Resend | Sending transactional and marketing email | Email address, message content |

| Supabase | Database / CRM, storage of account, intake, and contact data | Account, intake, uploaded contacts, usage |

| Form tool (Tally / HubSpot or similar) | Intake and inquiry forms | Form responses, intake data |

| Hosting provider | Hosting the site and application | Usage/log data |

Each subprocessor is bound by its own terms and privacy/security commitments.

A current list is available on request; we will update this Policy as our

subprocessors change.

We may also share information:

With your direction — for example, publishing content to channels or tools

you connect.

For legal reasons — to comply with law, respond to lawful requests, or

protect rights, safety, and security.

In a business transfer — in connection with a merger, acquisition, or sale

of assets, subject to this Policy.

6. Cookies and analytics

Our site may use cookies and similar technologies for essential functionality,

to remember preferences, and to understand site usage via analytics. You can

control cookies through your browser settings; disabling some cookies may affect

site functionality. *(Owner/attorney to confirm specific analytics tools and add

a cookie banner/consent mechanism if required for the Customer base.)*

7. Data retention

We retain personal information for as long as your account is active and as

needed to provide the Service, then for a reasonable period to comply with legal,

tax, accounting, and dispute-resolution obligations. Uploaded contact data is

retained per your instructions and deleted or returned on request or after

account termination, subject to legal retention requirements and routine backup

cycles. *(Owner/attorney to set specific retention periods.)*

8. Customer-uploaded contact data

When you upload contacts (such as a CRM export or past-client list):

You are the controller of that data. We act as a service

provider/processor and use the data only to provide the Service to you and on

your documented instructions.

You warrant that you have all necessary rights, permissions, and consents

to upload that data and to have us send marketing or follow-up communications

to those contacts, and that doing so complies with applicable law — including

CAN-SPAM and TCPA consent for email and SMS — and with your MLS,

brokerage, and state license rules.

We will not use uploaded contact data for our own marketing purposes.
On request or upon termination, we will delete or return uploaded contact data,

subject to legal retention and backup cycles.

If a contact contacts us directly, we will generally refer them to you, the

Customer, as the controller of their data.

9. Your rights and choices

Depending on where you live, you may have rights to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your information.
Receive a copy of your information (data portability).
Object to or restrict certain processing.
Opt out of marketing communications.
Opt out of "sale" or "sharing" of personal information for cross-context

behavioral advertising (we do not sell or share personal information in this

sense).

Not be discriminated against for exercising your rights.

These rights are described generically and may vary by jurisdiction (for example,

CCPA/CPRA-style rights in California and GDPR-style rights in the EU/UK).

*(Owner/attorney to tailor to the jurisdictions served.)*

To exercise any right, contact us at support@mitchandmilo.com. We will verify your

request and respond within the timeframe required by applicable law. You may

unsubscribe from marketing emails at any time using the link in those emails;

transactional/service messages may still be sent.

10. Security

We use reasonable administrative, technical, and organizational safeguards

designed to protect personal information, including reliance on reputable

subprocessors (such as Stripe and Supabase) with their own security programs. No

method of transmission or storage is 100% secure, and we cannot guarantee

absolute security.

11. Children's data

The Service is intended for licensed real estate professionals and is **not

directed to children under 16 (or the minimum age in your jurisdiction)**. We do

not knowingly collect personal information from minors. If you believe a minor

has provided us information, contact us and we will delete it.

12. International users

We operate from the United States, and information may be processed in the United

States and in the locations of our subprocessors. By using the Service, you

understand your information may be transferred to and processed in the United

States. *(Owner/attorney to add transfer-mechanism language if EU/UK customers

are served.)*

13. Equal Housing

Milo Marketing Engine supports the Equal Housing Opportunity and Fair Housing

principles. Customers are responsible for ensuring their marketing complies with

fair housing laws.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with

a new effective date and, where appropriate, notify you. Your continued use of

the Service after changes take effect means you accept the updated Policy.

15. Contact us

Milo Marketing Engine

57 Flint Creek Rd, McHenry, MS 39561

Email: support@mitchandmilo.com

Web: engine.mitchandmilo.com