Privacy Policy
Effective date: June 2026
Christopher Millson operates a founder-led advisory practice that builds, deploys, and maintains a managed AI workforce for operating companies, as a brand of Crown Mosaic Holdings LLC, a California limited liability company (“CMH,” “we,” “our,” “I”). This policy explains what client information I collect during an engagement, how it is processed, the third-party services involved, and your rights.
To build and run an agent for your business, I work with information you choose to share about how your company operates. That information is processed by named third-party services (listed below) under their own terms. I do not sell your data, and I do not use it to train any Crown Mosaic model.
1. What I collect
Engagement intake and scoping information: the business context you share so I can scope and build a managed agent, such as company name, industry, the workflow the agent will run, your priorities, and the boundaries you want the agent to hold. Operational data: the documents, examples, and access details you provide so the agent can do its work, which you control and can revoke. Engagement metadata: dates, scope, communications, and tier, used for delivery, billing, and quality. Payment information: billing name, email, and payment method, processed by my payment provider; I do not store full card numbers.
2. How your data is processed
Agent operation. A managed agent I build for you runs on a stack of named providers (listed in Section 3), including large language model providers. The business context and operational data you share are processed by those providers as my sub-processors under their own commercial terms. I do not use your data to train any Crown Mosaic model, and I do not build a separate proprietary model from your data.
You stay in control of what moves. The agent operates inside boundaries we define at the start of the engagement. You approve anything that moves money or ships work to a third party. Access you grant the agent can be scoped or revoked at any time.
Communications and coordination. Email, scheduling, and engagement coordination run through standard business tools described in Section 3.
No sale of personal data. I do not sell, rent, or share your personal data with third parties for their own marketing or advertising.
3. Third-party services and sub-processors
Building and running a managed agent involves third-party providers that process your data on my instruction. The specific providers depend on the agent built for your engagement. The categories below describe the providers a typical engagement uses; the exact set is named in your engagement terms.
| Provider category | Role | Data it receives |
|---|---|---|
| Large language model providers (for example, Anthropic, PBC) | Power the agent’s reasoning and output | The business context and task content the agent processes, under the provider’s commercial terms; no Crown Mosaic model is trained on this data |
| Cloud hosting and infrastructure providers | Run the agent and store its working state | Data the agent processes traverses this infrastructure during operation |
| Payment processor (Stripe, Inc.) | Process subscription payments | Billing name, email, and payment method only; it does not receive your operational content |
| Workflow and communication tools | Intake, scheduling, and engagement coordination | Engagement coordination details and any context you submit through them |
My bank processes only CMH’s own financial transactions and receives no client operational data; it is not a sub-processor for your engagement.
4. De-identified observations
I may create and retain de-identified observations derived from engagements: patterns and engagement-level metrics from which your name, brand, personnel names, and any information that could reasonably identify you have been removed, and which are not combined with other data in a way that could re-identify you. I use these only to improve how I build and run managed agents. They are never attributable to you and are never shared in attributable form. This right is exercised only where it is granted in your engagement agreement; it is not enabled by default.
5. Data location and retention
The infrastructure and storage that run your agent are hosted in the United States; coordination data routed through workflow tools may be stored on those tools’ United States infrastructure. I retain client intake and engagement records for three (3) years after an engagement ends, after which they are deleted in the ordinary course, subject to any longer period required by law. Operational access you grant during an engagement is removed when the engagement ends or sooner at your request. De-identified observations under Section 4 are retained on an aggregated basis.
6. No attributable marketing without your separate written consent
I will not use your name, brand, logo, or any attributable business outcome in any marketing, case study, testimonial, or public communication without your separate, express written consent. Signing your engagement agreement does not grant that consent. Only aggregated, non-attributable observations may appear in my materials. As of this policy’s effective date, I have delivered no client agents and present no client outcomes or testimonials.
7. Your rights
You may request access to, correction of, or deletion of your personal data, subject to my retention obligations and the de-identified-observations provision in Section 4 (which is not personal data once de-identified). Where required by applicable law, including the CCPA for California residents, I comply with data subject rights. To exercise these rights, contact christopher@christophermillson.com.
8. Cookies and changes to this policy
This website uses essential cookies required for site functionality. I also use Google Analytics to understand how visitors use the site. Analytics cookies are only set after you consent through our cookie banner, and you can change or withdraw your choice at any time using the cookie preferences link in the footer. If you do not consent, no analytics cookies are set and no analytics data is collected. I do not use advertising cookies or third-party tracking pixels. I review this policy whenever my providers or data practices materially change, and at least annually. Updates are posted on this page, and active clients are notified by email of any material change. Owner: Crown Mosaic Holdings LLC, christophermillson.com.
9. Contact
Questions regarding this privacy policy: christopher@christophermillson.com
Christopher Millson is the founder of Crown Mosaic Holdings LLC, the parent of Crown Mosaic Platform, Sovereign Ledger Capital, and Docta Wasabi. He works from Pasadena, California.
