Privacy statement

Who is responsible

Sarpost (Chamber of Commerce no. 68734581), the Netherlands, is the controller for the personal data described here.

Questions or requests: info@sarwise.com.

What we process

• Account: your email address, language, time zone and plan.
• Routes: names, start and end addresses with their coordinates, intermediate stops, times, days and week cycle.
• Traffic checks: the travel times and departure times we calculate for your trips.
• People you choose to notify: their name and their WhatsApp number or Telegram chat ID.
• Vehicles (business plans): vehicle or driver names and the driver's Telegram chat ID.
• Notifications: your Telegram chat ID and, if you turn them on, your browser's push subscription.
• Technical data: IP address and request data in server logs of our hosting providers.

Why, and on what legal basis

• To provide the service you signed up for: calculate when to leave, send alarms and arrival updates (performance of a contract, Art. 6(1)(b) GDPR).
• To keep the service secure and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).
• Contact details of people you notify are processed on your instruction. You confirm you may share them and that you have told those people.

Who receives data

We use these providers. They process data on our behalf or provide part of the service:

• Supabase: database and sign-in (servers in Frankfurt, EU).
• Vercel: hosting of the website and app.
• Google Maps Platform: coordinates and departure times of your routes, to calculate travel time with traffic.
• OpenStreetMap-based services: OpenFreeMap (map images, receives your IP address), Photon by komoot (address search text) and the OSRM routing service (route coordinates, to draw the road line).
• Telegram: delivers alarms to chats you connected.
• Push services of your browser or phone (for example Google, Apple, Mozilla): deliver notifications you turned on.

Transfers outside the EU

Some providers (such as Vercel, Google and Telegram) may process data outside the European Economic Area. Where that happens, we rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep data

• Account, routes, contacts and vehicles: as long as your account exists. When you delete a route, contact or vehicle, it is removed.
• Traffic checks and cached best-time charts: as long as the route exists.
• Everything above is deleted when your account is deleted.
• Server logs: as long as our hosting providers keep them, usually days to weeks.

Cookies

We only use cookies that are needed to keep you signed in. We do not use advertising or tracking cookies and no analytics.

Your rights

You may ask to see, correct, delete or receive a copy of your data, to restrict processing or to object to it. Send your request to info@sarwise.com; we answer within one month.

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

SarMaps is not intended for children under 16.

Changes

When this statement changes, we update the date at the top. For important changes we inform account holders by email.