MillicentAdd her to Discord

Legal · updated October 13, 2026

Privacy Policy

What Millicent and heymillicent.com collect, why, how long we keep it and how to delete it.

Who we are

LIKE A KING INC. operates Millicent and heymillicent.com. For data Millicent processes inside your Discord server, the server's administrators decide what she does there and we process that data on their behalf. For your own account and billing data, we are responsible for it. Contact us through our contact form at heymillicent.com/contact.

What we collect

Account data: your email address, sign-in details and your dashboard settings.

Billing data: plan, invoices and payment status from Stripe. We never see or store full card numbers.

Server configuration: the Discord server ID, chosen channels and roles, Millicent's personality settings and the knowledge documents you upload.

Community data processed by Millicent in servers where she runs: Discord user IDs and display names of members she talks with, recent messages she reads to decide whether and how to reply, short conversation context, and long-term memories she keeps about members and ongoing storylines (for example "Nika is building a racing team"). She does not read direct messages unless a member messages her, and she does not join voice channels.

Moderation and support records: case numbers, actions taken and ticket transcripts, if you turn those modules on.

Usage data: reply counts, model used and token usage, to show your usage and enforce limits.

Website data: basic, privacy-friendly analytics without advertising cookies. See Cookies below.

Why we use it

To run the Service you asked for (contract), to bill you (contract and legal obligation), to keep the Service secure and prevent abuse (legitimate interests), and to meet legal requirements. We do not sell personal data and we do not share it for cross-context behavioural advertising.

We do not use your content or members' messages to train AI models without explicit opt-in.

AI processing

To write a reply, Millicent sends the relevant recent messages, her personality settings and matching passages from your knowledge documents to an AI model provider. By default this is a free or low-cost model routed through our infrastructure; if you bring your own key, the provider you choose processes it under its own terms.

Before anything leaves our systems, an outbound filter removes secrets, keys and internal system details. Messages are sent only to produce the reply.

How long we keep it

Short-term conversation context: minutes to hours (set by the memory window, 4 hours by default), then discarded.

Long-term member memories: 90 days after a member's last interaction by default; server admins can choose a shorter or longer period up to 365 days.

Moderation cases and ticket records: kept while your plan is active so appeals can be reviewed, unless you delete them sooner.

Account and billing records: for the life of your account, and billing records for as long as tax law requires (usually 7 years).

After a hosted plan is cancelled: 7 days to export, then deletion within 30 days.

Forget me, export and delete

Any member can ask Millicent to forget them in a server where she runs (for example by saying "Millicent, forget me"). She deletes the long-term memories she holds about that member in that server.

Server admins can, from the dashboard: browse what she remembers about a member, forget a member, export all server data, and delete everything.

You can also ask us to access, correct, export or delete your personal data through our contact form at heymillicent.com/contact. We answer within 30 days (45 days where US state law allows) and will verify your request first.

Who receives data (processors)

Discord (the platform Millicent runs on), Stripe (payments), our hosting providers (servers in the EU and US), Supabase (database and sign-in), and AI model providers used to generate replies (for example OpenRouter or the provider you configure).

We may disclose data if the law requires it or to protect people's safety, and to a buyer if our business is sold, under the same protections.

Cookies

We use only cookies needed to keep you signed in and to remember your choices. We do not use advertising or cross-site tracking cookies. Non-essential cookies are off unless you allow them.

Your rights

Depending on where you live (for example the EU/UK under the GDPR, California under the CCPA/CPRA, or Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states), you may have the right to access, correct, delete, port or restrict your data, to opt out of sale or targeted advertising (we do neither), and to appeal our decision. You will not be treated differently for using these rights.

EU and UK residents can also complain to their data protection authority.

Children

The Service is not directed to children under 13 and we do not knowingly collect their personal data. Discord requires users to be at least 13 (older in some countries). If we learn that Millicent holds memories about a child under 13, we delete them. Server admins must not configure Millicent to target children.

Security and breaches

We encrypt data in transit, store API keys encrypted and write-only, limit staff access, and keep secrets out of logs. If a breach affects your personal data, we will notify you and the authorities as the law requires.

International transfers

We are based in the US and our servers are in the EU and US. Where we transfer EU/UK data, we rely on appropriate safeguards such as Standard Contractual Clauses.

Changes and contact

We will post changes here and notify you of material ones. Contact: our contact form at heymillicent.com/contact.

These documents are provided for transparency and may be updated. They are not legal advice.