Legal
Security
Last updated · August 2026
Application access
Staff sign in through Supabase Auth. Organization data is scoped so tenants do not see each other’s bookings. Role-based access in the product limits who can manage fleet settings and invitations.
Data in transit & at rest
Traffic to the app and API uses HTTPS. Database and auth are provided by Supabase’s managed infrastructure. We do not claim additional third-party certifications beyond what those providers publish.
Emails
Transactional booking and team emails are sent through Resend (or equivalent) using addresses you configure for your organization.
Reporting issues
If you believe you found a security issue, email hello@ridereserve.io with steps to reproduce. Please do not disclose publicly until we have had a reasonable chance to respond.