Privacy Policy

What Does This Privacy Policy Cover?

This Privacy Policy explains how Midvant LLC ("Midvant," "we," "our," or "us") collects, uses, and protects your personal information. Our policy applies to all interactions with our services, including our websites, mobile applications, property management services, and customer support channels. We believe in transparency and want you to understand exactly how we handle your information.

This policy covers several key areas:

• The types of information we collect and how we collect it
• How we use and share your information
• Your choices and rights regarding your information
• How we protect and store your data
• How to contact us with privacy questions

By using our services, you agree to the practices described in this Privacy Policy. We encourage you to read this document carefully to understand our practices regarding your personal information.

Information We Collect

We collect information in several ways to provide and improve our services. The types of personal information we collect depend on how you interact with us and which services you use. Here's a detailed explanation of the information we collect:

Information You Provide to Us

When you use our services, you may provide us with different types of information directly. This information is essential for us to provide our services effectively and ensure a seamless experience for you. Here's what we collect and why:

Account and Profile Information

When you create an account with us, we collect basic information necessary to set up and manage your account. This includes:

• Basic Information: Your name, email address, and phone number. We need this to create your account and communicate with you about your bookings and our services.
• Login Credentials: Your password and account preferences. These help secure your account and personalize your experience.
• Profile Details: Any additional information you choose to add to your profile, such as profile pictures or preferred communication methods.
• Verification Information: Government-issued ID or other documentation when required for identity verification, particularly for property owners or long-term rentals.

Booking and Reservation Information

When you make a booking through our platform, we collect information necessary to process your reservation and ensure a smooth stay. This includes:

• Travel Details: Your check-in and check-out dates, number of guests, and any special requests or preferences you share with us.
• Payment Information: Credit card or other payment details, billing address, and any promotional codes you use. We need this to process your payment and prevent fraud.
• Communication History: Messages between you and property owners/managers, including any special requests or arrangements made for your stay.

Property Owner/Manager Information

If you list your property on our platform, we collect additional information to manage your listing and ensure compliance with our services:

• Property Details: Information about your property, including location, amenities, pricing, and availability. This helps us market your property effectively to potential guests.
• Financial Information: Bank account details, tax information, and other payment-related data necessary for processing payments and maintaining compliance with tax regulations.
• Business Information: Business licenses, insurance documentation, and other regulatory compliance information as required by local laws.

Information We Collect Automatically

When you use our services, our systems automatically collect certain information about your device and how you interact with our platform. This helps us improve our services and provide a better user experience:

Device and Usage Information

We collect technical information about how you access and use our services:

• Device Information: We collect data about your device, including your IP address, browser type, operating system, and mobile device identifiers. This helps us optimize our services for different devices and troubleshoot technical issues.
• Usage Data: We track how you interact with our platform, including pages visited, features used, and time spent on different sections. This helps us understand which features are most valuable and identify areas for improvement.
• Location Information: With your permission, we may collect precise location data to provide location-based services. We also derive approximate location information from your IP address.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience and understand how our services are used:

• Essential Cookies: These are necessary for our website to function properly, enabling basic features like page navigation and access to secure areas.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Marketing Cookies: Used to track visitors across websites to enable us to display relevant advertisements.

Information from Third Parties

We may receive information about you from other sources to supplement the data you provide directly:

• Business Partners: Information from our business partners, such as payment processors, fraud prevention services, and marketing partners.
• Public Sources: Publicly available information from sources such as public records, social media platforms, and other public databases.
• Service Providers: Information from service providers who help us verify identity, prevent fraud, and maintain the security of our platform.

Table of Contents

1. Introduction and Scope
2. Information We Collect and Receive
3. How We Use Your Information
4. How We Share Your Information
5. Cookies and Other Tracking Technologies
6. Your Privacy Rights and Choices
7. State-Specific Privacy Rights
8. International Privacy Rights
9. Data Security
10. Data Retention
11. Children's Privacy
12. Updates to This Policy
13. Contact Us

1. Introduction and Scope

This Privacy Policy ("Policy") describes how Midvant LLC, including our subsidiaries and affiliated companies (collectively, "Midvant," "we," "our," or "us"), collects, uses, discloses, and protects your personal information. This Policy applies to:

• Visitors to our websites, mobile applications, and other online services (collectively, our "Services")
• Users of our vacation rental management and booking services
• Property owners and managers who list their properties through our Services
• Individuals who communicate with us or interact with our Services

By using our Services or providing us with your information, you consent to the practices described in this Policy. This Policy is incorporated into and subject to our Terms of Service.

1.1 Key Terms

Throughout this Policy, we use certain key terms that have specific meanings:

• Personal Information: Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with you or your household.
• Processing: Any operation performed on personal information, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, combination, restriction, erasure, or destruction.
• Services: Our websites, mobile applications, and other online services, as well as our vacation rental management and booking services.

2. Information We Collect and Receive

2.1 Information You Provide to Us

We collect information you provide directly to us, including:

• Account and Profile Information:
  • Name, email address, phone number, and password
  • Billing and payment information
  • Mailing address and contact details
  • Profile photos and preferences
  • Government-issued identification for identity verification
• Booking and Reservation Information:
  • Travel dates and preferences
  • Number of guests
  • Special requests or accommodations
  • Payment and billing information
• Property Owner/Manager Information:
  • Property details and descriptions
  • Availability and pricing information
  • Banking and tax information
  • Property management agreements
• Communications:
  • Messages through our platform
  • Customer service interactions
  • Surveys and feedback
  • Social media communications

2.2 Information We Collect Automatically

When you use our Services, we automatically collect certain information, including:

• Device Information:
  • IP address and location data
  • Device identifiers and characteristics
  • Browser type and version
  • Operating system information
  • Mobile network information
• Usage Information:
  • Pages and features accessed
  • Clicking and browsing patterns
  • Search terms and filters used
  • Timing and frequency of visits
  • Interaction with emails and advertisements
• Location Information:
  • Precise location (with consent)
  • Approximate location from IP address
  • Wi-Fi access point information
  • Cell tower triangulation data

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Business Partners:
  • Travel agencies and booking platforms
  • Property management systems
  • Payment processors
  • Marketing and advertising partners
• Identity Verification Services:
  • Background check providers
  • Credit reporting agencies
  • Document verification services
• Public Sources:
  • Public records and databases
  • Social media platforms
  • News and media outlets

3. How We Use Your Information

We use the information we collect to provide, improve, and personalize our services, as well as to develop new ones. Here's a detailed explanation of how we use your information:

Service Delivery and Improvement

The primary purpose of collecting your information is to deliver and enhance our services. This includes:

• Processing Bookings: When you make a reservation, we use your information to confirm your booking, process payments, and coordinate with property owners. This ensures a smooth booking experience from start to finish.
• Account Management: We use your account information to maintain and secure your account, track your preferences, and provide personalized experiences across our platform.
• Customer Support: Your information helps us respond to your inquiries, resolve disputes, and provide effective customer service when you need assistance.
• Service Enhancement: We analyze how you and others use our services to identify areas for improvement, develop new features, and enhance the overall user experience.

Communication and Marketing

We use your information to communicate with you about our services and keep you informed about relevant updates:

• Service Communications: We send essential messages about your bookings, account security, and service updates. These communications are necessary for providing our services and cannot be opted out of.
• Marketing Messages: With your consent, we send promotional content about special offers, new properties, and services we think might interest you. You can opt out of these communications at any time.
• Surveys and Feedback: We may contact you to request feedback about your experience or participate in optional surveys to help us improve our services.

Security and Fraud Prevention

Protecting our users and platform is a top priority. We use your information to:

• Account Security: We monitor account activity and verify identities to prevent unauthorized access and protect our users' information.
• Fraud Detection: We analyze transactions and platform activity to identify and prevent fraudulent behavior, protecting both guests and property owners.
• Platform Safety: Your information helps us enforce our terms of service, prevent abuse of our platform, and maintain a safe environment for all users.

Legal Compliance and Business Operations

We use information as required by law and to operate our business effectively:

• Legal Requirements: We process information to comply with applicable laws, regulations, and legal processes.
• Business Analytics: We analyze trends and usage patterns to make business decisions and improve our services.
• Corporate Transactions: In the event of a merger, acquisition, or sale, your information may be transferred as part of the transaction.

4. How We Share Your Information

We share your information with certain third parties to help us provide and improve our services. Here's a detailed explanation of how and why we share your information:

Service Providers

We work with trusted service providers who help us operate our business and deliver services to you. These providers are contractually obligated to protect your information and can only use it for specified purposes:

• Payment Processors: Handle secure payment transactions and prevent payment fraud.
• Cloud Services: Store and process data securely in accordance with industry standards.
• Analytics Providers: Help us understand how our services are used and improve user experience.
• Customer Support: Assist in providing customer service and support.
• Marketing Services: Help us deliver relevant marketing communications to users who have opted in.

Property Owners and Managers

We share necessary information with property owners and managers to:

• Facilitate bookings and stays
• Enable communication about reservations
• Process payments and refunds
• Handle special requests or issues

Business Transfers

If we're involved in a merger, acquisition, or sale of assets, we may transfer your information as part of that transaction. We'll notify you of any change in ownership or use of your information.

Legal Requirements

We may disclose information if we believe it's necessary to:

• Comply with applicable laws and regulations
• Respond to valid legal process
• Protect our rights and property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

Cookies and Other Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform and understand how our services are used. These technologies help us provide essential features, analyze usage patterns, and deliver personalized content. Here's a detailed explanation of our use of these technologies:

Types of Cookies We Use

Different cookies serve different purposes on our platform. Understanding these types helps you make informed choices about your privacy:

• Essential Cookies: These cookies are fundamental to the operation of our website. They enable basic functions like page navigation, secure access to your account, and maintaining your preferences during your session. Without these cookies, many of our services would not function properly.
• Functional Cookies: These enhance your experience by remembering your preferences and choices. They help personalize your experience by storing settings like your language preference, saved searches, and display preferences.
• Analytics Cookies: We use these to understand how visitors interact with our website. They provide valuable insights about which pages are most popular, how long people spend on different sections, and how they navigate through our site. This information helps us improve our services and make them more user-friendly.
• Marketing Cookies: These cookies track your browsing habits to help us deliver more relevant advertising content. They remember what you've looked at on our site and may share this information with other organizations, such as advertisers.

Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. These partners provide various services that help improve your experience:

• Analytics Partners: Services like Google Analytics help us understand how people use our website. They collect information about which pages you visit, how long you stay, and how you got here.
• Advertising Networks: These partners help us show you relevant advertisements on other websites. They use information about your interests based on your browsing history.
• Social Media Platforms: If you use social media features on our site, these companies may set cookies that recognize you and track your usage of our site.
• Payment Processors: When you make payments, our payment processing partners may use cookies to remember your payment preferences and ensure secure transactions.

Your Cookie Choices

We believe in giving you control over your privacy. You have several options to manage how cookies are used when you visit our site:

• Browser Settings: Most web browsers allow you to control cookies through their settings preferences. You can typically block third-party cookies, delete existing cookies, or set up alerts when websites try to place cookies on your device.
• Cookie Preference Center: Our website includes a cookie preference center where you can choose which types of optional cookies you want to allow. Essential cookies cannot be disabled as they are necessary for the website to function.
• Third-Party Opt-Out Tools: Many advertising networks provide ways to opt out of targeted advertising. You can use tools like the Digital Advertising Alliance's opt-out page to manage your preferences.

Please note that blocking or deleting cookies may impact your experience on our website, as some features may not function properly without them.

Your Privacy Rights and Choices

We are committed to providing you with control over your personal information. Depending on your location, you have various rights regarding your data. Here's a comprehensive overview of these rights and how to exercise them:

Your Core Privacy Rights

These fundamental rights help you maintain control over your personal information:

• Right to Access: You can request a copy of the personal information we hold about you. This includes details about what data we have, how we use it, and who we share it with.
• Right to Correction: If you believe any information we have about you is inaccurate or incomplete, you can ask us to correct or update it. We want to ensure your information is accurate and current.
• Right to Deletion: Also known as the "right to be forgotten," you can request that we delete your personal information from our systems, subject to certain exceptions required by law.
• Right to Data Portability: You can request your information in a structured, commonly used format that you can transfer to another service provider.

6.2 Exercise Your Rights

To exercise your rights:

• Email us at privacy@midvant.com

We will respond to your request within:

• 45 days for California residents
• 30 days for EU/UK residents
• 30 days for other jurisdictions

State-Specific Privacy Rights

Different states have enacted their own privacy laws that provide residents with specific rights regarding their personal information. We comply with all applicable state privacy laws and provide state residents with the rights they are entitled to under their state's laws.

California Residents

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide California residents with specific rights regarding their personal information. These laws give you greater control over how businesses collect and use your data:

• Right to Know: You can request details about the personal information we've collected about you, including the categories of information, sources, purposes for collection, and third parties we share it with.
• Right to Delete: You can request deletion of personal information we've collected from you, subject to certain exceptions necessary for our business operations or legal compliance.
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information to third parties, including for cross-context behavioral advertising.
• Right to Limit: You can limit the use and disclosure of sensitive personal information to specific business purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, though some features may be unavailable if you restrict certain data usage.

Virginia Residents

The Virginia Consumer Data Protection Act (VCDPA) provides Virginia residents with specific rights over their personal data. These rights are designed to give you greater control over how your information is collected and used:

• Right to Access: You can confirm whether we are processing your personal data and access such data.
• Right to Correction: You can correct inaccuracies in your personal data, taking into account the nature of the data and our processing purposes.
• Right to Delete: You can request deletion of personal data provided by or obtained about you.
• Right to Data Portability: You can obtain a copy of your personal data in a portable and readily usable format.
• Right to Opt Out: You can opt out of personal data processing for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal effects.

Colorado Residents

The Colorado Privacy Act (CPA) provides Colorado residents with specific rights regarding their personal data. These protections ensure you have control over how your information is collected and used:

• Right to Access: You can confirm whether a controller is processing your personal data and access that data.
• Right to Correction: You can correct inaccuracies in your personal data.
• Right to Deletion: You can request deletion of your personal data.
• Right to Data Portability: You can obtain your personal data in a portable and readily usable format.
• Right to Opt Out: You can opt out of processing for purposes of targeted advertising, sale of personal data, or profiling.

Exercising Your State-Specific Rights

To exercise any of these state-specific rights:

• Submit a Request: You can submit a request through our privacy portal, by email to privacy@midvant.com, or by calling our toll-free number.
• Verification Process: We'll need to verify your identity to process your request. This helps us ensure we're providing access to the right person.
• Response Timeline: We'll respond to your request within the timeframe required by your state's law (typically 45 days, with possible extensions).
• Authorized Agents: You may designate an authorized agent to make requests on your behalf.

8. International Privacy Rights

If you are located in certain regions outside the United States, you may have additional rights under applicable privacy laws. We are committed to honoring these rights and providing you with control over your personal information, regardless of your location.

European Union and United Kingdom Residents

Under the General Data Protection Regulation (GDPR) and UK GDPR, you have specific rights regarding your personal data. We take these rights seriously and have implemented processes to help you exercise them:

• Right to Be Informed: You have the right to know how we collect and use your personal data. This privacy policy and our communications with you are designed to provide this information clearly and transparently.
• Right of Access: You can request a copy of your personal data and information about how we process it. This helps you understand what data we hold and verify that we're processing it lawfully.
• Right to Rectification: If you believe the personal data we hold about you is inaccurate or incomplete, you can request that we correct or complete it. We want to ensure our records are accurate and up-to-date.
• Right to Erasure: Also known as the 'right to be forgotten,' you can request that we delete your personal data in certain circumstances. We will comply unless we have a legal obligation or legitimate reason to retain the data.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances, such as when you're contesting the accuracy of your data or objecting to our use of it.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format, or have it transferred directly to another service provider where technically feasible.
• Right to Object: You can object to our processing of your personal data in certain circumstances, particularly regarding direct marketing or processing based on our legitimate interests.
• Rights Related to Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Legal Bases for Processing

Under GDPR and UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

• Consent: When you have given clear consent for us to process your personal data for a specific purpose. For example, when you opt in to receive marketing communications.
• Contract Performance: When processing is necessary to fulfill our contractual obligations to you, such as processing your booking or managing your property listing.
• Legal Obligation: When processing is necessary to comply with our legal obligations, such as maintaining tax records or responding to court orders.
• Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided these interests don't override your fundamental rights and freedoms.
• Vital Interests: In rare cases, when processing is necessary to protect someone's life or safety.

International Data Transfers

When we transfer personal data outside the EU/UK, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses: We use EU-approved standard contractual clauses to protect data transfers to countries outside the EU/UK.
• Adequacy Decisions: We transfer data to countries that the EU Commission has deemed to provide adequate protection.
• Privacy Shield: Where applicable, we work with US-based service providers who are certified under the EU-US Privacy Shield Framework.
• Data Protection Agreements: We implement specific contractual protections with our service providers to ensure your data is protected.

Data Security

Protecting your personal information is one of our highest priorities. We employ industry-standard security measures to safeguard your data against unauthorized access, disclosure, alteration, and destruction. Our comprehensive security program includes:

Technical Safeguards

We implement multiple layers of technical security measures to protect your data:

• Encryption: We use industry-standard encryption protocols to protect data both in transit and at rest. This includes SSL/TLS encryption for data transmission and strong encryption algorithms for stored data.
• Access Controls: We maintain strict access controls and authentication procedures to ensure only authorized personnel can access personal data. This includes multi-factor authentication, role-based access, and regular access reviews.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular security monitoring to detect and prevent unauthorized access attempts.
• Security Testing: We conduct regular security assessments, including vulnerability scanning and penetration testing, to identify and address potential security weaknesses.

Organizational Measures

Beyond technical controls, we maintain comprehensive organizational security measures:

• Employee Training: All employees undergo regular security awareness training to understand their responsibilities in protecting customer data and recognizing security threats.
• Security Policies: We maintain detailed security policies and procedures that govern how we handle and protect personal information.
• Incident Response: We have a documented incident response plan to quickly address any potential security incidents and minimize their impact.
• Vendor Management: We carefully evaluate and monitor our service providers to ensure they meet our security standards and contractual obligations.

Data Breach Procedures

In the unlikely event of a data breach, we have established procedures to:

• Rapid Response: Quickly identify and contain the breach to minimize its impact.
• Notification: Promptly notify affected individuals and relevant authorities as required by applicable laws.
• Investigation: Conduct a thorough investigation to understand the cause and prevent similar incidents.
• Remediation: Implement necessary changes to prevent similar incidents in the future.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable laws. Our retention policies are designed to minimize the amount of personal data we store while ensuring we meet our legal and business obligations.

Retention Periods

We maintain different retention periods for different types of information:

• Account Information: We retain your account information for the duration of your active account plus 7 years after closure. This allows us to comply with tax laws, resolve disputes, and maintain necessary business records.
• Transaction Records: Financial transaction records are kept for 7 years to comply with accounting and tax requirements.
• Marketing Data: If you've opted in to marketing communications, we retain your preferences until you opt out or request deletion.
• Usage Data: We retain anonymized usage data for 25 months to analyze trends and improve our services.

Data Deletion

When personal information is no longer needed, we ensure it is securely deleted or anonymized:

• Secure Deletion: We use industry-standard methods to permanently delete data when it's no longer needed.
• Anonymization: In some cases, we may anonymize data instead of deleting it, removing all identifying information while preserving useful analytics data.
• Backup Retention: Deleted data may remain in our backup systems for a limited time before being permanently removed.

Children's Privacy

We take special precautions to protect children's privacy and comply with applicable laws regarding the collection of information from minors.

Age Restrictions

Our services are not directed to children under the age of 16:

• No Intentional Collection: We do not knowingly collect or solicit personal information from children under 16.
• Parental Consent: If we learn that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information.
• Notification: If you believe we might have any information from or about a child under 16, please contact us immediately at privacy@midvant.com.

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this Policy
• Sending an email notification if we make material changes
• Displaying a prominent notice on our Services

Contact Us

We welcome your questions and comments about our privacy practices. If you have any concerns or would like to exercise your privacy rights, please contact us: