Privacy Policy

This Privacy Policy explains how Godelivr Technologies Inc (“godelivr,” “we,” “us,” or “our”) handles personal data in connection with the godelivr service. It applies to two groups of people:

• Account Holders — the business owners and team members who sign up for and use godelivr directly.
• End Recipients — the customers and drivers an Account Holder adds to the Service in order to plan and run deliveries. End Recipients do not create an account or sign in; drivers interact with the Service only through a private route link.

For End Recipient data, the Account Holder decides what information to provide and why. We process that data on the Account Holder’s behalf and as described in this Policy. See our Terms of Service for how that responsibility is allocated.

Account information. When you sign up, we collect your email address and authentication credentials, and any business or profile details you add in Settings.

Customer and driver records (Customer Data). Account Holders typically enter, or import via CSV, names, phone numbers, email addresses, delivery or start/end addresses, and delivery notes for their customers and drivers.

Route and location data. Delivery addresses are converted to map coordinates (geocoded) to build routes, and route progress (which stops are pending or completed) is tracked as drivers work through a route.

Payment information. Subscription payments are handled by Stripe. We receive confirmation of payment and subscription status, but we do not receive or store your full card number.

Diagnostic and usage data. We use Sentry for error monitoring and a limited amount of session replay to diagnose bugs. Replay sessions mask on-screen text and block media by default, and are only a sample of overall traffic — not every session is recorded.

We use the information above to:

• Provide, maintain, and improve the Service, including route optimization and live progress tracking.
• Process payments and manage subscriptions.
• Provide customer support and respond to inquiries.
• Monitor for errors, abuse, and security issues.
• Comply with legal obligations.

We do not sell personal data, and we do not use Customer Data or End Recipient data for advertising.

We share information with the following categories of service providers, only as needed to run the Service:

• Supabase — database hosting and account authentication.
• Vercel — application hosting.
• Stripe — subscription billing and payment processing.
• Google — address geocoding and mapping.
• Sentry — error monitoring and diagnostic session replay.

If we add a Square integration for order sync, order and customer data you choose to sync will be shared with Square as part of that feature. We may also disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to previously collected data.

We use strictly necessary cookies to keep you signed in and to maintain your session (set by Supabase authentication). We do not use third-party advertising cookies or trackers.

We retain account and Customer Data for as long as your account is active, and for a reasonable period afterward to allow account recovery, meet legal or accounting obligations, and resolve disputes. You can request earlier deletion as described in Your Rights & Choices. Diagnostic data in Sentry is retained according to Sentry’s standard retention window before automatic deletion.

We use industry-standard safeguards — including encryption in transit, access controls, and database-level tenant isolation — to protect data against unauthorized access, alteration, or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

godelivr is operated from British Columbia, Canada. Our service providers may process and store data in Canada, the United States, or other countries where they operate. Where required, we rely on appropriate safeguards for cross-border transfers.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. Account Holders can access and correct most account and Customer Data directly in the Service, or reach out to us at support@godelivr.com.

If you are an End Recipient (a customer or driver whose information was added by an Account Holder) and want to exercise these rights, please contact the business you interacted with first, since they control that data; you can also contact us directly and we will route your request appropriately.

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal data from children under 13 (or the equivalent minimum age in your jurisdiction).

We may update this Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify Account Holders by email or in-app notice.

Questions about this Policy or how we handle personal data? Contact us at support@godelivr.com.