Privacy Policy

1Information we collect

Information you provide

• Account information: name, email address, phone number, business or store name, and business address provided during registration or onboarding.
• Order data: products browsed, orders placed, delivery addresses, order notes, and transaction history.
• Driver onboarding data (Driver app): vehicle details, driving history, identity and licensing documents you upload, and a verification selfie. These documents are reviewed manually by our team for eligibility verification and are stored securely on our backend (Supabase); we do not use a third-party identity-verification provider.
• Supplier catalogue data (Supplier app): product listings, images, pricing, and inventory you upload or import (for example from Shopify).
• Communications: messages, support requests, and application forms submitted through our apps or website.

Information we collect automatically

• Device information: device type, operating system version, app version, and push notification token.
• Usage data: in-app interactions used for support, diagnostics, and improving the service.
• Location data: as described in Section 2 below, depending on which app you use and the permissions you grant.
• Website data: IP address, browser type, pages viewed, and interaction data collected through cookies and similar technologies (see Section 7).

2Location data

InstaSupply Driver app, background location disclosure. The Driver app collects precise location data (GPS) while you have an active delivery, including when the app is closed or running in the background, to share your live position with the customer awaiting their delivery, to show your position on the delivery map, and to match you with nearby delivery requests. A persistent notification is shown while background location is active. Location sharing stops when you complete or cancel the delivery, or go offline. We do not track your location when you are not on an active delivery.

• Customer app: with your permission, we use your device location only while you are using the app to show your position on the map and help you set delivery addresses. Location access is optional.
• Supplier app: with your permission, we use your approximate location only while you are using the app to display your city on the account security screen. Location access is optional.
• Driver app: precise foreground and background location as described above. Location updates recorded during a delivery are stored on our servers so the customer can view live delivery progress, and are associated with the specific order.

You can withdraw location permission at any time in your device settings. Note that the Driver app requires location access to accept and complete deliveries.

3Camera, photos, and documents

• Customer app: camera and photo library access is requested so you can take or choose a profile picture. Images are used only for the purpose you initiate.
• Supplier app: camera access is requested to scan product barcodes; photo library access is requested to upload product images.
• Driver app: camera access is requested for identity selfie verification; photo and document picker access is requested so you can upload licensing and onboarding documents.

We never access your camera or photos in the background, and we do not scan your media library. Content is only uploaded when you explicitly choose to capture or select it.

4Push notifications

All three apps request permission to send push notifications, for example order status updates (Customer), new order alerts (Supplier), and new delivery requests (Driver). We store a push token for your device to deliver these. You can control which notification types you receive in the app’s notification settings, and you can disable notifications entirely in your device settings.

5Payments

Payments in the Customer app are processed by Stripe. Your card details are collected and processed directly by Stripe and are never stored on our servers; we receive only a payment confirmation and limited transaction metadata (such as amount and payment status). Stripe’s handling of your data is governed by the Stripe Privacy Policy.

6How we use your information

• To create and manage your account, and verify supplier and driver eligibility.
• To process, fulfil, and deliver orders, including matching orders with suppliers and drivers.
• To provide live delivery tracking to customers using driver location data.
• To send order, delivery, and account notifications.
• To provide customer support and respond to inquiries.
• To improve, secure, and troubleshoot our apps and website.
• To measure website and marketing performance (website only).
• To prevent fraud and comply with legal obligations.

7Cookies and tracking (website only)

Our website uses cookies and similar technologies in three categories. You can manage your preferences on our Cookie Settings page. Our mobile apps do not use advertising cookies or ad-tracking SDKs.

8How we share information

We do not sell or rent your personal information. We share data only as follows:

• Between users to fulfil orders: suppliers see the order details and delivery information needed to prepare an order; drivers see pickup and drop-off addresses and customer contact details needed to complete a delivery; customers see the driver’s name and live location during an active delivery.
• Service providers: Supabase (database and backend hosting), Stripe (payment processing), Expo (push notification delivery and app updates), and map providers (Google Maps / Apple Maps) for map display and routing.
• Analytics and advertising partners (website only), as described in Section 7.
• Legal authorities when required by law or to protect our rights, users, or the public.

9Data retention and deletion

We retain your data for as long as your account is active or as needed to provide services and meet legal, tax, and accounting obligations, after which it is deleted or anonymized. Driver location history is retained only as long as needed for delivery records and dispute resolution.

You may request deletion of your account and associated personal data at any time, either from within the app (Account → Delete Account) or by visiting the Account Deletion Request page for your app, app.instasupply.ca/delete-account (Customer), partner.instasupply.ca/delete-account (Supplier), or driver.instasupply.ca/delete-account (Driver), or by contacting us at support@instasupply.ca. Upon a verified request, we delete your account and personal data, except for limited records we are required to retain for legal, tax, and accounting purposes (such as transaction records), which are securely retained for the period required by law and then deleted.

10Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may withdraw consent to its collection and use. To exercise these rights, contact support@instasupply.ca. You may also revoke individual app permissions (location, camera, photos, notifications) at any time in your device settings.

11Security

We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS/TLS) and access controls that restrict data access to authorized purposes. No method of transmission or storage is completely secure, but we work to protect your data against unauthorized access, loss, or misuse.

12Children’s privacy

Our services are intended for business use and are not directed at children under 13. We do not knowingly collect personal information from children.

13Changes to this policy

We may update this Privacy Policy from time to time. Changes will be reflected in the “Last updated” date above, and we will notify you of significant changes through the apps or by email.

14Contact us

InstaSupply Inc.
Email: support@instasupply.ca