Privacy policy

SabaGo is a delivery platform operated by MaxDeals (KvK 96472499), Duizendguldenkruid 3, 3137WB Vlaardingen, the Netherlands. Contact: support@sabago.app.

SabaGo is an order and delivery platform for the island of Saba. SabaGo is a trading name used by MaxDeals for this platform, it is not a separate legal entity.

In this policy, “we” and “SabaGo” mean MaxDeals. “You” means anyone who uses sabago.app, whether you order food, cook it, deliver it, or apply to work with us.

If you have a question about your data, email support@sabago.app. We answer every message ourselves.

We collect only what we need to get an order from a kitchen to a door.

When you create an account

Your name, email address, and phone number. We need your email to sign you in and to send you order confirmations, and your phone number so the restaurant or the rider can reach you if something about your order is unclear.

When you sign in with Google

Customers can sign in with their Google account. If you do, Google shares your name, email address and profile picture URL with us, through Supabase, the service that runs our sign-in. We use them to create your account, to sign you in, and to fill in the name on your profile. Your email address is then used the same way as for any account, as described above. Your profile picture URL stays with your sign-in record. We do not show it or use it. We do not receive your Google password. We do not ask for your contacts or any other Google data.

You can remove SabaGo’s access at any time in your Google account settings, under third-party apps and services. This does not delete your SabaGo account. To delete your account, use Delete account on your Account page.

When you place an order

What you ordered, the delivery location you picked on the map (a set of coordinates, and optionally a landmark note you write yourself), any notes you add for the kitchen or the rider, the time, the price breakdown, and the tip. Saba has no usable street addresses, which is why we ask for a pin on a map rather than an address.

If you save a place, we keep its name, pin, note and how you want it handed over. You can add a photo of the place to help the rider find it. Only the rider delivering your order sees that photo, and only while the delivery is on its way.

If you choose “Leave at door”, the rider takes a photo of your order where they left it, as proof of delivery. You see that photo on your order page. We delete it after 30 days.

When you share a delivery

You can share a link to follow your delivery. Anyone with that link sees the restaurant name, the status and the expected time, nothing else: not your address, your pin, your delivery PIN, any photo, any amount, or your name or the rider’s. The link stops showing anything once the order is delivered or cancelled, and after 6 hours at most.

When you turn on notifications

If you allow notifications, your browser gives us a push address and the keys to send to it, and we store those with your browser type and when it was last used. We use them only to tell you about your orders. Your browser’s own push service (for example Google, Apple or Mozilla) delivers the message. You can turn notifications off in your browser at any time.

When you pay

Your card details go straight to Stripe, our payment processor. We never see or store your full card number. We store only the payment status, the amount, and a Stripe reference so we can issue a refund if something goes wrong.

If you save a card, Stripe keeps it for you, linked to a customer record at Stripe. We keep only the reference to that record. We use a saved card for the orders you place and for a tip you choose to add after a delivery. You can remove a saved card in your account.

When you deliver for us

Your name, contact details, vehicle type, licence and insurance details, the deliveries you completed, and what you earned. We ask for proof of insurance because you are carrying our brand on your bag.

While you have an order, its customer sees your first name. Once you have picked the order up, they can also call you on the phone number in your profile.

When you cook for us

Your restaurant details, your menu, your opening hours, your bank details for payouts, and the orders placed through SabaGo.

When you apply to become a partner

Whatever you type into the form at sabago.app/partners: your name, contact details, village, and the details relevant to your application. We use it only to contact you about that application. If you join a waitlist for a vertical that has not launched yet, such as pharmacy, groceries or parcels, that signup is only your contact details, and we keep it only to email you when that vertical opens up.

When you just visit the site

A session cookie so you stay signed in, and a cookie that remembers the delivery location you chose so you do not have to set it again. Our on-site analytics are cookieless and do not track you across other websites. We do not use advertising cookies.

Only the people and services that need it to make an order work.

• The restaurant you ordered from sees your first name, your order, and your notes. It does not see your exact delivery pin, our commission, or what the rider earns.
• The rider delivering your order sees your first name, your phone number, your delivery pin, and any note you left. Once the delivery is complete, the rider loses access.
• Anyone you send a shared delivery link to sees the restaurant name, the status and the expected time, until the order is delivered or cancelled, and for 6 hours at most.
• Stripe processes payments and keeps the cards you save. Resend sends our emails. Supabase hosts our database and runs our sign-in. Vercel hosts the website. Each of them handles data on our instructions only.
• Google handles sign-in for customers who choose to sign in with their Google account.
• Nobody else. We do not sell your data, we do not rent it, and we do not share it for advertising.

We will hand over data if the law requires it, and we will tell you when we are allowed to.

Order data for as long as our tax and accounting obligations require. Account data for as long as you have an account. Partner and waitlist applications for 12 months after we decide, so we can come back to you if something opens up. Delivery photos for 30 days. Anything else, no longer than we need it.

When you delete your account on your Account page, we remove your name, phone number, saved places, photos, favorites, saved cards and messages straight away, and you can no longer sign in to it. Your past orders stay, without your name, address or notes, because we must keep the amounts for our accounts. Two records stay for security purposes: the sign-in log of our login service keeps your email address and name, and if our team ever changed your login email address, the record of that change stays as evidence.

You can ask us to show you the data we hold about you, to correct it, or to delete it. You can ask us to stop sending you email that is not about an order you placed. You can ask for a copy of your data in a portable form.

Email support@sabago.app and we will respond within 30 days, usually much sooner. We may ask you to confirm who you are first, so we do not hand your data to someone else.

If you think we have handled your data badly, tell us first so we can fix it. You also have the right to complain to the relevant data protection supervisory authority for the Caribbean Netherlands.

Every table in our database has row level security, which means a query can only ever return the rows that belong to the person asking. Payment details never touch our servers. Our staff accounts have roles, so someone who dispatches orders cannot see financial data.

No system is perfect. If something goes wrong that puts your data at risk, we will tell you and the authorities as quickly as we can.

SabaGo is not for children. You need to be 18 or older to hold an account or to ride for us. If we learn we are holding a child’s data, we delete it.

If we change how we handle your data in a way that matters, we will say so on this page and, if it is significant, by email. The date at the top always tells you when this version took effect.

MaxDeals
Duizendguldenkruid 3, 3137WB Vlaardingen, the Netherlands
support@sabago.app