YOUR INFORMATION
Privacy
Updated September 27, 2026
Blackwater Transportation Inc. uses the information you provide to arrange transportation, operate customer and chauffeur accounts, and help passengers and chauffeurs meet. Submitting a reservation request does not confirm a journey.
Reservations and accounts
We process your name, email, phone number, pickup and destination addresses, stops, pickup time, flight details, passenger and luggage counts, chauffeur preference and the notes you choose to provide. Authorized team members use these details to coordinate your journey. Supabase provides authentication, database and private file storage, and Resend delivers account verification emails.
An optional customer account uses email verification codes. We save the contact details, addresses and passengers you choose to save. Your account shows reservations linked to that account; we do not automatically attach old guest reservations by matching a name, phone number or email. Repeat booking creates a new request. Completed-journey PDFs are journey summaries, not proof of payment.
If you book for someone else, provide their full name and contact number with their permission. Your private saved nickname is not shared with the chauffeur. The actual passenger’s name, phone and relevant journey details are shared with the assigned chauffeur so they can coordinate by call or SMS.
Information on your device
Your signed-in session is retained in the app’s web storage or browser local storage until you sign out or it expires. Sign out on a shared device. An unfinished reservation can also be saved locally so an interruption does not erase your work. This draft is separated by account, is eligible for restoration for up to 72 hours, and is discarded when next checked after expiry. It is cleared on successful submission, sign-out or account deletion. Guest drafts are stored separately on that device. Drafts do not contain payment card information or verification tokens.
An optional customer profile photo is stored on the iPhone where you add it. In this version it is not uploaded as a customer portrait or shown to chauffeurs. Removing the photo or deleting the account through the app removes that local copy.
Journey messages and camera photos
For eligible reservations made for yourself, messaging becomes available between you and your assigned chauffeur one hour before pickup. Your contact numbers may be visible to each other. The assigned vehicle’s model, color, plate and representative image become visible during that contact window. Vehicle images illustrate the selected model and are not necessarily photographs of the specific vehicle.
Chat photos are captured with the camera after you grant camera permission. The chat feature does not browse your photo library or automatically save its photos there. Photos are re-encoded before upload to remove original location metadata. Chat messages and photos are private to the authorized participants through the service. Before your first photo upload, a preview asks for permission to send this and future photos to OpenAI, our external AI image-safety provider. Camera permission alone does not authorize this transfer. Choosing Allow & send enables that sharing for this account on this device. Later photos and retries are sent without another permission prompt until you withdraw permission. Photos are uploaded through Blackwater’s server to OpenAI for an unsafe-content check. The image itself may include people, visible location details or other information you photographed. If approved, it is shared with the other authorized participant. Our moderation request does not add your reservation, contact details or chat text to the image. Cancel sends no image; you can retake it or continue with text messages. When the safety check is unavailable, photo sending is unavailable.
OpenAI processes submitted photos under its API terms and data-handling rules. Blackwater’s conversation cleanup does not control records OpenAI may retain under those rules; we do not promise that deleting a chat immediately removes all provider records. See OpenAI’s API data controls for current information. Your explicit permission covers this and future photo uploads for the same account on this device. You can withdraw it in Account → Photo sharing; the next photo will require permission again. Clearing browser or app data, using another device, or a change in provider or sharing purpose may require a new permission.
A conversation ends when the chauffeur completes the journey or four hours after the scheduled pickup time, whichever happens first. Cancellation, rejection or changes to the assigned chauffeur or pickup time can also end and clear the previous conversation. Access ends at that point and the service removes message history and schedules stored photo files for physical deletion. Storage failures are retried until removal succeeds; a temporarily delayed physical deletion does not restore access to the photo. The apps clear local conversation media when the conversation closes or the app moves to the background.
You may report a message or block further messaging. Reports record the reporter, reported account, reservation reference, reason and handling status. They do not retain a separate copy of the original message or photograph after conversation cleanup. Reports that have been resolved become eligible for cleanup once they are 30 days old. Do not include unnecessary sensitive information in a report.
Bookings made for another passenger use calls or SMS with that passenger instead of in-app chat. An SMS fallback opens your phone’s message composer; you decide whether to send. Calls and SMS/MMS are handled by your device, carrier and messaging service. Their histories and any copies kept or captured by a recipient are outside Blackwater’s chat deletion controls.
Notifications
If you allow notifications, Apple Push Notification service delivers reservation confirmations, pickup reminders and journey-message alerts. The service stores the app’s device token, account/session association and notification delivery state to route alerts to the correct signed-in device. You can change notification permission in iPhone Settings. Signing out removes the current device’s account registration when the service can be reached; revoked or expired sessions are not eligible for account alerts.
Address suggestions and protection
Address text you search is sent to Google Maps to return suggested addresses. See the Google Privacy Policy. Cloudflare Turnstile helps protect reservation forms from automated abuse and processes browser and verification information under its Privacy Policy. When a chauffeur opens navigation, the selected route is shared with the chosen maps service.
Payments
Payments use Blackwater’s GoDaddy payment link, including when the payment page opens within the app. Payment details and Apple Pay authorization, when available, are handled by the payment provider and Apple. Our reservation forms and journey chat do not collect your full payment card details. Payment confirmation is separate from reservation confirmation.
Deleting your account
Use Account → Delete account in the customer app or customer website account to begin deletion. You must confirm the request. The service immediately disables access, revokes sessions, removes saved profile information and passengers, and clears account chat access. Authentication-account and stored-photo removal may finish through retry processing if a provider is temporarily unavailable. The deletion screen distinguishes a completed deletion from one still being processed.
Deleting your account does not cancel existing reservations. Details needed to fulfil an active reservation are retained until it closes or four hours after its scheduled pickup, then removed. Completed reservations are anonymized during account deletion. Limited trip and transaction facts may remain in anonymized form for business records; records held by payment providers are handled separately. Operational notes created separately by staff may not be linked to your app account and are reviewed separately when you contact us about deletion. Use the reservation’s cancellation option or contact the team about an active journey before deleting your account. For help with a deletion still being processed, contact us below.
Questions, corrections and support
Contact [email protected] or (617) 256-1675 about your information, a correction, a privacy concern or account deletion. If you use another contact service such as email or WhatsApp, that service also processes your communication under its own terms.