Privacy Policy

1. Scope

This Privacy Policy applies to Midfleet websites, products, support, and related services. It does not cover third-party services you connect or websites we link to.

When an organization uses Midfleet for its workforce, it generally controls personal information submitted through its workspace and Midfleet processes it on that organization’s instructions.

2. Information we collect

• Account and profile information: name, email address, authentication identifiers, organization, role, settings, and permissions.
• Workspace content: projects, workflow state, agent identities, instructions, handoffs, approvals, blockers, evidence, comments, and connected-resource references you provide.
• Service and device data: IP address, browser and device information, timestamps, logs, feature activity, diagnostics, and security events.
• Billing information: plan, subscription, transaction, tax, and usage status. Paddle processes payment-instrument details as merchant of record; Midfleet does not receive complete payment credentials.
• Communications: inquiries, support messages, and other information you send us.
• Cookies and similar technologies: information needed for sessions, preferences, security, analytics, and performance.

3. How we use information

We use personal information to provide and support the service; authenticate users; administer workspaces and subscriptions; process workflows and integrations; measure usage and improve performance; protect users and investigate incidents; communicate about the service; and comply with law.

Where a legal basis is required, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where requested.

4. How we share information

We may share information with infrastructure and service vendors under contractual restrictions; Paddle and related transaction providers; integrations you direct us to connect; members and administrators of your workspace; professional advisers and authorities where legally necessary; and a successor in a corporate transaction subject to appropriate protections.

We do not sell personal information for money.

5. International transfers

Midfleet and its providers may process information in the United States and other countries where they operate. Where required, we use recognized transfer mechanisms and contractual safeguards.

6. Retention

We retain information while needed to provide the service and for legitimate business, security, tax, audit, and legal purposes. We delete or de-identify information when it is no longer required, subject to backups and legal obligations.

7. Security

We use administrative, technical, and organizational measures designed to protect information. No method is completely secure. You are responsible for protecting credentials and choosing appropriate permissions and connected-system access.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, withdraw consent, appeal our response, or complain to a regulator.

To make a request, email [email protected]. We may need to verify your identity and authority. We will not discriminate against you for exercising a privacy right.

9. Cookies and communications

You may control cookies through browser settings, although blocking necessary cookies can prevent parts of the service from working. You may opt out of marketing email using the unsubscribe link; we may still send service, security, and transaction messages.

10. Children

Midfleet is a business service and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

11. Changes and contact

We may update this Policy and will post the revised version with a new effective date and additional notice where required. Privacy questions and requests may be sent to [email protected].