Privacy & Data Protection

Privacy Policy

Last Updated: October 29, 2026 • Effective Date: October 29, 2026 • Jurisdiction: Republic of Latvia (EU) & GDPR (Regulation EU 2016/679)

OVERVIEW: Oscar Dispatch operates on a decentralized, privacy-first model. We believe business data belongs to the business that creates it. This Privacy Policy details how we handle information submitted through our website (oscardispatch.com), our 24-hour evaluation demo request forms, and our communications.

1. Data Controller Information

The Data Controller responsible for personal data processed through the Oscar Dispatch website is:

Service Name: Oscar Smart Dispatching ("Oscar Dispatch")
Data Controller: Oscar Smart Dispatching, represented by Founder Santis
Location / Jurisdiction: Riga, Republic of Latvia (European Union)
Direct Data Protection Inquiries: support@oscardispatch.com

2. What Personal Data We Collect

2.1. Evaluation Demo & Contact Requests

When you complete our 24-hour sandbox evaluation request form or contact our team, we collect commercial business contact details:

Full Name (to address and personalize your setup communication);
Company Name (to verify operator eligibility and pre-configure your sandbox branding);
Work Email Address (to deliver sandbox access credentials, tour guides, and setup instructions);
Phone / WhatsApp Number (to verify genuine dispatch inquiries and dispatch the instant access link);
Fleet Size (van and crew count, to calibrate appropriate tier and simulator settings);
Inquiry Notes (any operational requirements or questions you voluntarily share).

2.2. Interactive Live Simulator & Local Storage

Our interactive live scheduler simulator runs entirely client-side inside your browser. Ephemeral changes you make inside the simulator (e.g. moving a mock van or toggling a status) are stored strictly in your browser's local storage (localStorage) and are never transmitted to or harvested on our servers.

2.3. Server Logs & Technical Metadata

When you visit oscardispatch.com, our hosting infrastructure automatically logs standard technical metadata (IP address, browser type, operating system, timestamp, and referring URL). These logs are processed strictly to ensure server security, prevent denial-of-service abuse, and maintain platform uptime.

3. Legal Bases for Processing (GDPR Article 6)

We process personal data strictly under valid legal grounds provided by EU Regulation 2016/679 (General Data Protection Regulation):

Pre-Contractual Performance (Art. 6(1)(b)): Processing is necessary to verify, provision, and deliver the 24-hour private evaluation demo requested by you.
Legitimate Interest (Art. 6(1)(f)): Protecting our infrastructure against spam, verifying legitimate business operators, and improving website performance.
Consent (Art. 6(1)(a)): When you opt-in to receive product updates or direct onboarding correspondence.

4. Decentralized Subscriber Architecture — "BYODB"

A fundamental architectural feature of Oscar Dispatch is our Bring Your Own Database (BYODB) model for active commercial subscribers:

Client Data Sovereignty: Live subscriber fleet operations, driver personal records, client addresses, job manifests, and invoices reside directly inside the subscriber's own private database instance (e.g., Supabase PostgreSQL) or chosen SMS carrier account (e.g., ClickSend).
No Central Data Mining: Oscar Dispatch does not aggregate, sell, analyze, or mine subscriber end-customer data. Each subscriber retains 100% legal ownership and Data Controller status over their commercial records.

5. How We Share & Disclose Information

We do not sell, rent, monetize, or trade your personal or business contact details to any third parties or advertising networks. We share information strictly with vetted technical service providers necessary to operate the platform:

Cloud Hosting & CDN Infrastructure: Hosting providers (such as Cloudflare and Render.com) for secure content delivery and SSL encryption.
Communication Channels: WhatsApp Business API and email delivery gateways strictly for delivering requested login credentials and customer service.
Legal Compliance: When required by binding legal process or court order under Republic of Latvia and European Union law.

6. Data Retention Policy

Demo Request Records: Retained for up to 12 months following initial inquiry to support onboarding communication, after which records are securely purged unless active customer onboarding commences.
24-Hour Evaluation Sandbox: Temporary demonstration instances are automatically reset or decommissioned upon expiration of the 24-hour evaluation period.
Server Security Logs: Retained for a maximum of 90 days for forensic security analysis and then automatically deleted.

7. Your GDPR Rights

Under the EU General Data Protection Regulation (GDPR) and UK GDPR, you have the following rights regarding your personal information:

Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): You may request correction of any inaccurate or incomplete details.
Right to Erasure / "Right to be Forgotten" (Art. 17): You may request deletion of your contact data from our active demo database.
Right to Restriction of Processing (Art. 18): You may request that we temporarily suspend processing your data.
Right to Data Portability (Art. 20): You may request an export of your provided contact details in a structured, machine-readable format.
Right to Object (Art. 21): You may object at any time to the processing of your data based on legitimate interests.
Right to Lodge a Complaint (Art. 77): You have the legal right to lodge a complaint with the competent supervisory authority — the Data State Inspectorate of the Republic of Latvia (Datu valsts inspekcija, Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv).

To exercise any of these rights, simply email our data support desk at support@oscardispatch.com. We respond to all legitimate requests within 30 days without fee.

8. Cookies & Tracking

We provide full granular control over cookies via our on-site Cookie Preferences manager. We categorize cookies into Strictly Necessary, Analytics, and Marketing:

Strictly Necessary: Essential session cookies and client-side local browser storage required for technical site navigation, security, and the interactive simulator. These remain active by default.
Analytics & Marketing: Optional categories allowing anonymous site usage telemetry and campaign measurement. These are entirely opt-in and remain deactivated unless you explicitly consent via our Cookie Preferences banner.

9. Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or our data protection practices, please contact us:

Service Desk: Oscar Smart Dispatching
Data Protection Email: support@oscardispatch.com
WhatsApp Support: Available via official website live chat
Website: https://oscardispatch.com