SUPACRIT is a Portland-based bicycle messenger service. We collect the smallest set of information needed to do the job. We do not sell it.

What we collect

• Dispatch details — pickup + dropoff address, contact name/phone, package description, requester name/phone. Submitted by you on the dispatch form.
• Coordinates — pickup/dropoff lat/lng derived from the addresses for routing and service-area enforcement.
• Rider location — while a delivery is in flight, our riders share their position so customers can track them. Pings stop when the dispatch is delivered or canceled.
• Proof-of-delivery photos — if a rider takes a delivery photo, it is stored against the dispatch record.
• Account credentials — for dispatchers, clients, and riders: email + hashed password. We never store your password in clear text.

How we use it

• Operate the dispatch — assign riders, route them, deliver your package.
• Send transactional SMS to the requester at confirmation, pickup, and delivery. Reply STOP to opt out.
• Resolve disputes and audit our own service — we keep raw rider GPS pings for 90 days, then downsample to one ping per minute.

Who we share with

Only the service providers we need to operate:

• Twilio — for SMS delivery.
• Stripe — for payment processing (when payment is enabled).
• OpenStreetMap / Nominatim — to geocode addresses to coordinates.
• Our hosting provider — Render.

We do not sell, rent, or market your data.

Your choices

• SMS opt-out — reply STOP to any SUPACRIT message.
• Data deletion — email privacy@supacrit.com with your slip number(s).
• Access — same address; we'll send you what we have within 30 days.

Contact: privacy@supacrit.com