1.Overview
ModMage, Inc. (“ModMage”, “we”, “us”, or “our”) provides a multi-tenant property-management platform that helps landlords and property managers onboard tenants, collect rent, route maintenance, and operate portfolios. This policy applies to https://modmage.io, the ModMage web application at https://app.modmage.io, and our mobile apps for iOS and Android (together, the “Services”).
We have written this policy in plain language wherever possible. If anything is unclear, contact us at privacy@modmage.io and we will be glad to help.
2.Who we are (controller and processor)
ModMage serves two broad groups of people, and our role under data-protection law depends on which group you belong to:
- Account customers — landlords, property managers, and their staff who subscribe to ModMage. For the personal information in these accounts we generally act as a data controller.
- Residents and applicants — tenants and rental applicants whose information a customer adds to the platform. For this information we generally act as a data processor on behalf of the customer, who is the controller. If you are a resident, please direct privacy requests to your property manager first; we will support them in responding.
3.Information we collect
We collect the following categories of information:
| Category | Examples | Source |
|---|---|---|
| Account & profile | Name, email, phone, role, company, password (hashed) | You, at sign-up |
| Property & resident records | Units, leases, tenant contacts, maintenance tickets, documents | Customers and their residents |
| Payments | Billing contact, last-4 and card brand, bank routing for payouts, transaction history | You and our payment processors |
| Usage & device | IP address, browser or OS, device identifiers, pages viewed, feature events, crash logs | Automatically |
| Support & communications | Messages, attachments, call notes, survey responses | You |
We do not knowingly collect special categories of data (such as health or biometric data) and ask that you not upload them to the Services.
4.How we use information
- Provide, operate, secure, and improve the Services.
- Authenticate users, process rent and payouts, and prevent fraud.
- Send transactional messages — receipts, maintenance updates, and security alerts.
- Provide customer support and respond to your requests and inquiries.
- Analyze usage to understand performance and develop new features.
- Send product and marketing communications where permitted — you can opt out at any time.
- Comply with legal obligations and enforce our agreements.
5.Legal bases for processing (EEA / UK)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:
- Contract — to deliver the Services you or your organization have requested.
- Legitimate interests — to secure, analyze, and improve the Services, balanced against your rights.
- Consent — for optional cookies and certain marketing, which you may withdraw at any time.
- Legal obligation — to meet tax, accounting, and other statutory duties.
7.Mobile apps and device permissions
Our iOS and Android apps may request the following device permissions. Each is optional and used only for the stated purpose; you can change permissions at any time in your device settings:
- Camera and photos — to attach photos to maintenance tickets and upload documents.
- Notifications — to deliver rent reminders, maintenance updates, and security alerts.
- Location (approximate, optional) — to help match properties and pre-fill addresses; we do not track background location.
- Files and storage — to upload and download leases and receipts.
The apps also collect diagnostic and crash data to keep the experience reliable. We do not use mobile advertising identifiers for cross-app tracking.
8.Data retention
We keep personal information for as long as your account is active and as needed to provide the Services. After an account closes, we delete or anonymize personal information within 90 days, except where we must retain records to meet legal, tax, accounting, or fraud-prevention obligations. Customers control resident records and can delete them at any time. See Account and Data Deletion for how to request erasure.
9.Security
We protect information with encryption in transit and at rest, network isolation, least-privilege access controls, and continuous monitoring. ModMage is independently audited to SOC 2 Type II. Learn more on our Security page. No method of transmission or storage is perfectly secure, but we work hard to protect your data and to notify you and the relevant authorities of incidents as required by law.
10.International data transfers
We are based in the United States and may process information in countries other than your own. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
11.Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing or withdraw consent.
EEA / UK (GDPR)
You may exercise the rights above and lodge a complaint with your local supervisory authority. We will not discriminate against you for exercising your rights.
California (CCPA / CPRA)
California residents may request the categories and specific pieces of personal information we have collected, request deletion or correction, and opt out of any “sale” or “sharing” of personal information. We do not sell personal information and do not share it for cross-context behavioral advertising. You may designate an authorized agent to make a request on your behalf.
To exercise any right, email privacy@modmage.io. We will verify your identity and respond within the time required by law.
12.Children's privacy
The Services are intended for business use by adults and are not directed to children under 16. We do not knowingly collect personal information from children. See our Children's Privacy notice for details. If you believe a child has provided us information, contact privacy@modmage.io and we will delete it.
14.Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the Services after an update means you accept the revised policy.
15.Contact us
If you have questions about this policy or our privacy practices, or to reach our Data Protection Officer, contact:
ModMage, Inc. — Privacy Team
Email: privacy@modmage.io
Data Protection Officer: dpo@modmage.io
2261 Market Street, Suite 4242
San Francisco, CA 94114
United States