Privacy Policy

Who we are

SAFE918 is a 501(c)(3) nonprofit harm reduction program serving Washington County, Oklahoma and the surrounding region. We are a state-registered harm reduction site under Oklahoma SB 511 and operate in coordination with the Oklahoma State Department of Health (OSDH). When we say “we,” “us,” or “SAFE918,” we mean SAFE918 and its volunteers acting on its behalf.

For privacy reasons, some of our mailings and emails go out under the name 918 Resources — including packages addressed from 918 Resources, emails from @918resources.org, and the tracking page at track.918resources.org. 918 Resources is operated by SAFE918; this policy applies equally to anything you receive under either name.

Information we collect, use, and share

Information we collect

We try to collect as little as possible. Depending on which part of our program you use, we may collect:

• Order information for SAFEKits: a name or alias of your choice, mobile phone number, and a pickup location or mailing address.
• Volunteer information: name, contact info, role interest, and any background or scheduling information you choose to share.
• Donation information: handled by Stripe. Card numbers never touch our servers; we receive a confirmation token, the donor name, and the amount.
• Conversation data from SAFEBot: the answers you submit during a chat flow, stored alongside the order or volunteer record they belong to.
• SMS consent records: the verbatim consent text shown to you, the timestamp, the IP address used to grant consent, the user agent, the campaign identifier, and the phone number you authorized. Retained per the requirements of CTIA Messaging Principles & Best Practices §5.1.2.
• Usage analytics: anonymized event data (page views, button clicks, bot-step completion) via PostHog, used to understand which flows work and which break. Not linked to identifying program data.

What we do not collect

We do not require government ID, immigration status, insurance information, or proof of address. We do not collect Social Security numbers. We do not record drug use history except where you voluntarily share it as part of a kit request.

How we use information

• To fulfill SAFEKit orders and send pickup or shipping updates.
• To coordinate volunteer scheduling, training, and shift logistics.
• To process donations and send tax receipts.
• To prepare aggregate, de-identified program reports required by OSDH under SB 511. These reports do not include individual participant identifiers.
• To improve the site and bot, using anonymized analytics.

How we share information

We never sell your information. We share it only with:

• Service providers who help us run the program, strictly to the extent needed to provide their service: Twilio (SMS delivery and A2P 10DLC campaign registration), Stripe (donation processing), our hosting and email providers, and PostHog (anonymized analytics).
• Government reporting required by SB 511 and related Oklahoma law, in aggregate de-identified form.
• Legal process, if compelled by a valid subpoena or court order. We will resist over-broad requests where we reasonably can.

SMS messages

We use SMS only for program-related communications. We never use the program SMS number for marketing, fundraising solicitations, third-party content, or affiliate offers.

Who we message and why

SAFE918 SMS is sent to two recipient groups:

1. Program participants — people who enrolled through this website, an in-person paper intake form, or a documented phone-call enrollment. Messages cover SAFEKit pickup appointments, shipping notifications for harm reduction supplies, and supportive recovery resources.
2. Registered SAFE918 volunteers — people who opted in during volunteer onboarding. Messages cover shift assignments, kit-fulfillment task notifications, appointment and training reminders, and program coordination.

Both recipient groups receive only transactional and program-informational messages. Opt-in is captured separately for each group, applies only to the campaign for which it was given, and is not transferable.

How we obtain consent

We obtain express written consent before sending any SMS message. Consent is captured at one of three points:

1. Through the online enrollment flow on this site, where the following checkbox must be checked before submission:

“I agree to receive text messages from Safe918 about appointments, shipping updates, and recovery resources. Message frequency varies. Message and data rates may apply. Reply STOP to cancel.”

2. By signing a paper intake form during in-person enrollment with identical consent language and a signature field.
3. Verbally during a phone call, documented by staff with date, time, and consent confirmation.

Frequency, cost, and opt-out

Frequency. Message frequency varies based on your interaction with the program. Most participants receive fewer than five messages per kit order; volunteers receive messages tied to scheduled shifts and training events.

Cost. Message and data rates may apply. SAFE918 does not charge for messages, but your mobile carrier may.

Opting out. Reply STOP, UNSUBSCRIBE, CANCEL, END, or QUIT to any SAFE918 message to be removed from all program SMS for that campaign. Reply HELP for help and program contact information. Opt-outs are honored immediately. Carriers are not liable for delayed or undelivered messages.

US carrier registration (A2P 10DLC)

Our program SMS is sent over a US 10-digit long code that is registered under the A2P 10DLC framework operated by US wireless carriers via Twilio Inc. As part of that registration, our brand identity (SAFE918), use case (“nonprofit / public service announcement”), opt-in language, and message samples are reviewed and on file with The Campaign Registry. We do not share opt-in data, phone numbers, or consent records with carriers, the registry, or any third party for marketing or affiliate purposes. Sharing of opt-in data is restricted strictly to what is required to deliver messages.

Opt-in evidence we retain

For each consent we capture, we retain the following so the consent is auditable per CTIA §5.1.2:

• Timestamp of consent acquisition
• Consent acquisition medium (online form, paper intake, or documented phone call)
• The verbatim text shown to you
• The specific campaign for which the opt-in was provided
• The IP address used to grant consent (online captures only)
• The phone number for which consent was granted
• The identity of the person who consented

Consent records are retained for at least four years to comply with TCPA and Twilio audit requirements.

Embedded links and phone numbers

SAFE918 SMS messages may contain links and phone numbers, but only to a strictly limited set: links to safe918.com and to tokenized shipment-tracking pages on USPS, UPS, or FedEx; phone numbers for SAFE918's own program line, 911, the 988 Suicide & Crisis Lifeline, and the SAMHSA helpline 1-800-662-HELP. We do not use URL shorteners and do not embed third-party links or numbers.

Retention

Order records are retained for as long as needed to fulfill the order plus any reporting period required by law. Volunteer records are retained while the volunteer is active and for one year after. Donation records are retained for seven years for tax and audit purposes. SMS consent and opt-out records are retained for at least four years. You can request earlier deletion at any time; see “Your rights” below.

Your rights

You can ask us at any time what we have on file about you, correct it, or ask us to delete it. We honor deletion requests except where retention is required by law (e.g., donation records, SMS consent records). Email [email protected] or call our program line.

Security

We use industry-standard encryption in transit (HTTPS) and at rest, restrict access to program data to a small number of authorized volunteers and staff, and conduct regular review of our privacy and security procedures consistent with CTIA Messaging Principles & Best Practices §§5.2.2 and 5.2.3. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify you as required by law.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them. Harm reduction services may be provided to minors where lawful and clinically appropriate; consent and data handling for minors follow Oklahoma law and OSDH guidance.

Changes

We will post any changes here and update the “Last updated” date. Material changes affecting SMS consent or data sharing will be communicated to active program participants and volunteers directly.

Contact

Privacy questions, legal inquiries, or rights requests: [email protected]. SMS program help: reply HELP to any SAFE918 message, or call our program line listed in the site footer.