Privacy Policy

How Midos collects, uses, and protects your data.

Last updated: August 11, 2026

This Privacy Policy explains how Midos ("we", "us", "our") collects, uses, discloses, and safeguards information when you use the Midos ERP web application and related services (the "Service"). We act as the data controller for the personal data described here. Our practices comply with Egypt's Personal Data Protection Law (Law No. 151 of 2020).

1. Information we collect

Account information: name, email address, password (stored as a salted hash), role, and profile details you provide when invited to the Service. Business data: client contact details, order and maintenance records, financial and inventory information, and notes you and your colleagues enter while using the Service. Usage data: device, browser, approximate location (derived from IP), interaction logs, and error reports collected automatically. Location data: when scheduling maintenance visits or resolving service areas, we may process geographic coordinates that you submit (e.g. via the map picker). We do not request continuous background location.

2. How we use your information

We use personal data to: provide and operate the Service; authenticate users and manage sessions; create and manage client, order, maintenance, and financial records; communicate with you about your account; detect, prevent, and address fraud, abuse, and security issues; and comply with our legal obligations.

3. Google APIs and sign-in

We use Google services through the following Google APIs. When you connect a Google Account, Google shares with us only the data covered by the scopes you consent to, and we use that data in accordance with the Google API Services User Data Policy, including the Limited Use requirements. • Google Sign-In / OAuth (scope: openid, email, profile) — to authenticate you and populate your display name, email address, and profile photo. • Google Calendar API (scope: https://www.googleapis.com/auth/calendar.events) — to create and update calendar events for your maintenance visits and tasks, only when you connect the integration. • Google Tasks API (scope: https://www.googleapis.com/auth/tasks) — to create and manage tasks on your behalf when you opt in. • Google Maps Platform (server-side) — to geocode addresses and resolve service areas from locations you submit. We do not use data obtained from the Google APIs listed above to train our models, to advertise, or to share with third parties for their independent use, and we do not transfer such data to others except as necessary to operate the integration you authorised. You can disconnect any Google integration at any time from your settings, which revokes our ongoing access.

4. Lawful basis (Egypt PDPL)

We process personal data under the Egyptian Personal Data Protection Law on the basis of: your consent (for Google integrations and optional processing); the performance of a contract (operating the Service you signed up for); our legitimate interests (security, fraud prevention, and service improvement); and compliance with legal obligations.

5. Service providers and processors

We rely on trusted processors that act on our instructions: Supabase Inc. (database hosting and authentication), Google LLC (the APIs listed above and Cloud infrastructure), Sentry (error monitoring), and providers of email and hosting infrastructure. Processors are bound by written agreements requiring confidentiality and appropriate security measures. We do not sell your personal data.

6. Data retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to meet legal, accounting, or reporting requirements, to resolve disputes, and to enforce our agreements. You may request deletion sooner as described in section 8.

7. Security

We use technical and organisational measures designed to protect personal data, including encrypted password hashing, row-level security on our database, transport encryption (TLS) in transit, role-based access controls, and security logging. No system is perfectly secure, but we work to protect your data consistent with industry practice.

8. Your rights

Subject to Egyptian law, you may: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict certain processing; and withdraw consent for optional processing (such as Google integrations) without affecting processing carried out before withdrawal. To exercise any of these rights, contact onboarding@midoes-erp.com. We will respond within 30 days.

9. International data transfers

Our processors may store or process data outside Egypt. Where this happens, we rely on processor contractual safeguards and the applicable lawful-transfer mechanisms to protect your data.

10. Children's privacy

The Service is a business tool and is not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy. Material changes take effect 30 days after we post the updated version; the "Last updated" date at the top reflects the latest revision. Continued use of the Service after that period constitutes acceptance.

12. Contact