Privacy Policy

Midway provides a platform for teams to connect their data and build internal applications. This Policy covers the information we handle as a business — your account and how you use the Service. It does not change any separate arrangement that governs the data you load into the Service, which we handle on your behalf as described in “Customer data” below.

Information you provide. When you create an account we collect your email address, and if you sign in with Google, your name and basic profile details from Google. When you set up an organization or workspace, we collect the names and settings you choose. If you contact us, we keep the content of your message.

Information collected automatically. When you use the Service we automatically collect basic technical information needed to operate and secure it, such as your IP address, browser and device type, and log data about your requests (for example, timestamps and the actions taken).

Customer data. You may create workspaces and applications and connect your own data sources. The data you load or generate through the Service (“Customer Data”) may include personal information about your own users or contacts. You control this data; we process it on your behalf to provide the Service (see “Customer data” below).

We use information to:

• create and authenticate your account and keep you signed in;
• provide, operate, maintain, and improve the Service;
• secure the Service and prevent abuse, fraud, and unauthorized access;
• respond to your requests and communicate with you about your account and the Service;
• comply with our legal obligations.

Where required by law, our legal bases for processing are: performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (where applicable), and compliance with legal obligations.

We use a small number of first-party cookies that are necessary for the Service to work — most importantly a secure, encrypted session cookie that keeps you signed in, and a cookie that remembers interface preferences. We do not use advertising cookies, and we do not use third-party analytics or tracking tools. Because these cookies are essential to providing the Service, disabling them may prevent you from signing in or using it.

We do not sell your personal information. We share information only as follows:

• Service providers. We use trusted third parties that process information on our behalf under contract to run the Service: WorkOS (identity and authentication), Amazon Web Services (cloud hosting and database), and Google (Google sign-in, and our business email).
• Legal and safety. We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of Midway, our users, or the public.
• Business transfers. If Midway is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
• With your direction or consent. We share information as you direct (for example, when you invite people to your organization) or with your consent.

We retain your account information for as long as your account is active. You can delete your account at any time from your dashboard, which removes your identity and associated data from our active systems. Residual copies may remain in encrypted backups for a limited period before they are overwritten on a rolling basis. We keep limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

We take reasonable measures to protect information, including encryption in transit (HTTPS), encrypted (“sealed”) session cookies, scoped access controls that isolate each organization’s data, and hosting on a major cloud provider with its own security controls. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

We are based in the United States and host the Service on infrastructure located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for such transfers.

Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or export it, and to object to or restrict certain processing.

• EEA/UK (GDPR). You may exercise the rights above, withdraw consent at any time, and lodge a complaint with your local data-protection authority.
• California (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request deletion or correction, and not to be discriminated against for exercising your rights. We do not sell or “share” personal information for cross-context behavioral advertising.

To exercise any of these rights, email support@usemidway.com. We will respond as required by applicable law and may need to verify your identity first.

For personal information contained in Customer Data that you load or generate through the Service, you act as the “controller” (or equivalent) and Midway acts as a “processor” that handles it on your behalf and under your instructions. You are responsible for having the necessary rights and permissions for that data and for complying with the laws that apply to it. If an individual whose data appears in Customer Data wishes to exercise their rights, they should contact the organization that controls it; we will support that organization as required.

The Service is not directed to children, and you must be at least 16 years old to use it. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

Questions or requests about this Policy or your information? Email support@usemidway.com.