Milestone ("we", "us", "our") is committed to protecting the personal data of our users and their clients. This Privacy Policy explains how we collect, use, store, and share information when you use our service at milestonehq.co.
Milestone is a relationship management tool for independent financial advisors. We are based in Singapore and our services are primarily directed at financial advisors in Southeast Asia.
We have designated a Data Protection Officer (DPO) as required under the Singapore Personal Data Protection Act (PDPA). For all privacy enquiries, data access requests, or complaints, contact our DPO directly:
Data Protection Officer, Milestone
Email: [email protected]
General enquiries: [email protected]
Your account data:
Your clients' data (entered by you):
You are responsible for ensuring you have appropriate consent from your clients to store their data in a third-party tool.
Your data is stored in Cloudflare's infrastructure (Cloudflare D1 database and KV store). Cloudflare operates globally distributed data centres. Data is encrypted in transit (HTTPS/TLS) and at rest.
Passwords are never stored in plaintext. We use salted hashing for all passwords. Sessions expire after 30 days of inactivity.
Cross-border transfers: Some of our third-party service providers are based outside Singapore (including Anthropic and Twilio in the United States). When we transfer personal data overseas, we take steps to ensure it receives a standard of protection comparable to the PDPA, including by relying on contractual data processing agreements with each provider. By using the Service, you consent to these transfers. A list of providers and links to their privacy policies is in Section 5.
We share data with the following third parties to deliver our service:
We do not sell your data or your clients' data to any third party.
We have entered into, or rely on, data processing agreements with each of these providers to ensure your data is handled appropriately.
Under the Singapore Personal Data Protection Act (PDPA) and equivalent laws in Malaysia, Thailand, and other SEA jurisdictions, you have the right to:
To exercise these rights or make a data request, email [email protected].
In the event of a data breach that is likely to result in significant harm to affected individuals, we will:
If you become aware of any potential security issue or breach, please notify us immediately at [email protected].
We retain your data for as long as your account is active. When you delete your account, all your data (account, clients, call notes, email log) is permanently deleted from our systems within 30 days.
We use Cloudflare Web Analytics, which does not use cookies or track individual users. We do not use advertising cookies or tracking pixels.
We may update this policy from time to time. We will notify you of significant changes via email. Continued use of the service after changes constitutes acceptance.
For any privacy concerns, data requests, or to reach our Data Protection Officer: [email protected]