Privacy Policy

1. What this covers

This policy explains how MidTier (midtier.io) handles personal data for two kinds of people: managers (landlords and property managers) who use MidTier to run their portfolios, and tenants whose details managers store and who sign in to their own tenant view.

2. What we collect

• Account data: your name, email address and password (stored only as a secure hash), plus the role on your account (manager or tenant).
• Portfolio data you enter: properties, units, tenants, lease terms, rent payment records and maintenance requests. Managers enter this; it typically includes tenant names, contact details, lease dates and payment amounts.
• Content you submit: maintenance requests with a description, category and optionally a photo; messages sent through the contact form.
• Service data: notification records (for example rent overdue, maintenance updates, lease renewal warnings) and basic technical logs needed to run and secure the service.

New accounts may open on a sample portfolio of fictional data. It contains no real personal information.

3. How we use it

We use this data only to run MidTier for you:

• Operating your dashboard — showing your portfolio, lease, rent status and maintenance queue.
• Sending notifications — in-app alerts, and transactional emails such as maintenance request updates.
• Securing accounts, preventing abuse, and fixing problems.
• Answering questions you send us through the contact form or support email.

We don't sell your data, and we don't use it for advertising or to train AI models.

4. Who can see your data

Access is separated by design: a manager sees only the portfolio they manage, and a tenant sees only their own lease, rent status, payment history and maintenance requests. Maintenance photos are visible only to the person who uploaded them and the manager of the property involved. Our staff can access data only when needed to support you, secure the service, or comply with law.

5. Sharing

We share data only with the service providers that make MidTier work — hosting, database and transactional email delivery — under contracts that restrict them to processing on our behalf. We may also disclose data if the law requires it, or to protect the rights and safety of our users.

6. Data retention and deletion

We keep your data while your account is active. If you stop using MidTier and ask us to delete your account, we delete your account data and portfolio data; we may keep minimal records where the law requires (for example, for security or dispute purposes). Managers control the tenant data they enter; tenants who want their data changed or removed should contact their manager first, and can contact us if that doesn't work. Contact messages are kept only as long as needed to handle the conversation.

7. Security

We protect data with encryption in transit and at rest, strict database-level access rules, private storage for maintenance photos, and secure password handling. No system is perfectly secure — please use a strong, unique password and tell us at support@midtier.io if you spot a problem.

8. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise them, email support@midtier.io or use our contact form — we'll respond within a reasonable time.

9. Changes

We may update this policy as the service changes. Material changes will be reflected on this page with a new date above, and we'll notify account holders when something significant changes.

10. Contact

Privacy questions? Email support@midtier.io or use the contact form.