Privacy notice

Last updated: November 14, 2026

This notice explains how MidMillion (“we”) handles personal data collected through midmillion.com: the contact form and the demo call with our AI agent. We follow the EU General Data Protection Regulation (GDPR).

What we collect

• Contact form: your name, company, email or phone number, the message you write, the topic you choose and the language of the page.
• Demo call: your voice and the conversation transcript, plus the optional name, product and price you enter before the call.
• Technical data: your IP address, used only to protect the form from abuse. We store only a one-way pseudonymous hash, which is used for one hour to limit repeated submissions.

We do not use cookies, analytics or advertising trackers. The site remembers your language choice in your browser’s local storage; it is never sent to us.

Why we use it and on what legal basis

• To reply to your request and prepare an offer — steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
• To run the demo call you start — your consent, given by starting the call (Art. 6(1)(a) GDPR). You can end the call at any time.
• To keep the form free from spam and abuse — our legitimate interest (Art. 6(1)(f) GDPR).

Where it is stored and for how long

• Form requests are stored in a database located in the European Union and kept for up to 24 months after our last contact with you, unless we enter into a contract.
• Demo call recordings and transcripts are kept for up to 30 days.
• Pseudonymous IP hashes stop being used after one hour; expired hashes are deleted automatically the next time the form is submitted.

Who receives it

We do not sell your data. We share it only with service providers that work for us under data processing agreements: our hosting provider, the provider of the voice AI technology for the demo call, and the messaging service we use to notify our team about a new request. Where a provider processes data outside the European Economic Area, the transfer is protected by the European Commission’s Standard Contractual Clauses or an adequacy decision.

Your rights

You may ask us to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw it at any time; this does not affect processing that took place before. You also have the right to lodge a complaint with a data protection supervisory authority in your country.

To exercise your rights, reply to any message we have sent you, or send a request through the contact form and mention “privacy”.

Changes

We may update this notice. The current version is always published on this page, with the date of the last update.