Privacy Policy

Last updated: August 28, 2026

This Privacy Policy explains how Midpoint ("we," "us," or "our"), operated by Amanda Paige, collects, uses, and protects information when you use our service (the "Service").

1. Information We Collect

Account information. When you sign up, we collect your email address and password (securely handled via Supabase Authentication — we do not store your password in plain text).

Business and client data. As you use the Service, you may input:

• Your business name and profile information
• Client names, addresses, phone numbers, tags, and notes
• Team member names, phone numbers, and photos
• Route and schedule information

Payment information. Subscription payments are processed by Stripe. We do not directly collect or store your full credit card number — Stripe handles this in compliance with PCI-DSS standards. We retain limited billing information (such as subscription status) necessary to manage your account.

Location data. Client addresses you enter are converted into map coordinates using Mapbox's geocoding service, in order to display and optimize routes.

Usage data. We may collect basic technical information such as browser type, device type, and general usage patterns to help us maintain and improve the Service.

2. How We Use Information

We use the information we collect to:

• Provide and operate the Service (route optimization, client management, scheduling)
• Process subscription payments
• Send transactional emails (account confirmation, password resets, billing notices) via Resend
• Maintain the security and integrity of the Service
• Respond to support requests
• Improve and develop the Service over time

We do not sell your data or your clients' data to third parties.

3. SMS / Text Messaging Communications

If a business using Midpoint enables the Missed-Call Text-Back feature, phone numbers of callers are used solely to send an automated text reply on that business's behalf when a call goes unanswered.

• No sharing with third parties. Mobile phone numbers collected or used for this SMS feature are not sold, rented, or shared with third parties for marketing purposes.
• Message frequency. At most one message is sent per missed call. No recurring, marketing, or promotional messages are sent through this feature.
• Message and data rates may apply.
• Opt-out. Recipients can reply STOP to any message to opt out of future replies.

For full details on this SMS program, see our SMS Consent Disclosure.

4. How Your Data Is Protected

• All client data is protected using Row-Level Security, meaning only your account can access data you've entered — it is never visible to other users of the Service.
• Data is transmitted using HTTPS encryption.
• Access to sensitive credentials (such as API keys) is restricted to server-side systems and never exposed to your browser.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Third-Party Service Providers

We rely on the following third-party providers to operate Midpoint, each of which processes certain data on our behalf:

These providers have their own privacy practices governing how they handle data on our behalf.

6. Your Responsibilities Regarding Client Data

If you input personal information about your own clients (names, addresses, phone numbers) into the Service, you are responsible for ensuring you have a lawful basis and appropriate consent to collect and process that information under applicable law. Midpoint acts as a data processor for this information on your behalf.

7. Data Retention

We retain your account and business data for as long as your account remains active. If you cancel your subscription or delete your account, your data will be deleted or anonymized within a reasonable period, except where we are required to retain certain records for legal or accounting purposes.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Export your data
• Withdraw consent for certain processing

To exercise any of these rights, contact us at support@midpointapp.io.

9. Cookies

We may use essential cookies or similar technologies necessary for authentication and basic functionality of the Service. We do not currently use cookies for advertising or third-party tracking purposes.

10. Children's Privacy

The Service is not intended for use by anyone under the age of 18, and we do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at: support@midpointapp.io