Staff SMS Privacy Policy

Effective October 4, 2026

Scope

This policy covers the Riders First Staff SMS Verification program for authorized Admin and Coach accounts. It covers staff authentication messages and related enrollment/support records. It does not enroll staff in marketing, rider-course notification or other SMS programs.

Information used

The program uses the mobile number enrolled on the staff account, the staff account identifier and eligibility status, and records needed to document consent, opt-out requests and support. Authentication and messaging systems also process challenge timing and delivery/verification status. A signed consent form records staff name, staff-account email, phone number, signature and date.

Purpose

We use this information to deliver requested verification codes, authenticate staff sign-ins, prevent misuse, record consent and handle support or opt-out requests. Consent to this program is limited to staff verification texts.

Service providers and sharing

Supabase processes authentication and factor verification. Cloudflare runs the server-side delivery hook, and Telnyx and telecommunications carriers process SMS delivery. We may share the information needed to operate this program with those service providers. Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. SMS opt-in data and consent will not be shared for purposes unrelated to providing this program. These restrictions apply to transfers as well as sales.

Protection and retention

Completed consent forms are kept in private staff records with access limited to authorized personnel; only the blank form may be published. Staff phone numbers and credentials are not included in public forms, campaign samples or application source. The reviewed delivery hook does not log verification codes, message bodies or raw phone numbers in its audit records. Authentication and messaging providers necessarily process message contents and may keep records under their own retention practices. Riders First keeps consent and support records only as needed to operate the program, document consent, resolve disputes and meet applicable obligations.

Your choices

You may decline SMS consent or withdraw it by replying STOP to the sending number or contacting us. Withdrawal does not bypass staff authentication requirements; it can prevent completing SMS verification and accessing privileged staff functions. Requests to correct or remove records can be made to the contact below, subject to authentication, operational and applicable recordkeeping requirements.

Questions and policy updates

Contact coaches@riders-first.com about this program or your information. This policy is effective October 4, 2026. Material changes and the updated effective date will be shown on this page.