1. Our Role and Your Organization
We handle account administration, billing, support, website activity, and security information to operate our business. We also process shipment, driver, carrier, customer, and other business records on behalf of organizations using ARK, according to their instructions and our agreements with them.
If your employer, carrier, broker, or another organization provides your access or submits information about you, it determines how that information is used in its operations. Its administrators may manage access and business records. Contact that organization about its practices or records; you may also contact us for help directing a request. This policy does not replace another organization's privacy notice.
2. Information We Collect and Its Sources
The information depends on the features used. We receive it from you, your organization, business counterparties, connected providers, public business and regulatory sources, and automatically from devices using the Service. Categories include:
- Account and contact information: names, email addresses, phone numbers, business addresses, organization details, roles, login information, and preferences.
- Transportation and business records: shipment details, stops, rates, customer and carrier contacts, driver and vehicle information, operating authority, insurance, contracts, signatures, uploaded documents, and accounting records.
- Financial and tax information: subscription and invoice details, payment status, tax identifiers and forms, and bank names, account types, account numbers, and routing numbers submitted during applicable onboarding or payment workflows. Payment processors also handle payment information under their own notices.
- Communications: support requests, emails and attachments submitted or connected to workflows, text messages, delivery status, notification preferences, and records of consent and opt-out requests.
- Location information: driver or vehicle locations, shipment tracking events, and approximate location derived from IP addresses, as described below.
- Device and usage information: IP addresses, browser and device details, timestamps, pages and features used, referring pages, campaign identifiers, cookies, performance measurements, error reports, and security or audit events.
3. How We Use Information
- Provide accounts, permissions, transportation workflows, document handling, and integrations.
- Support dispatch, shipment visibility, communications, accounting, and authorized payment workflows.
- Administer subscriptions, calculate usage charges, and maintain billing records.
- Respond to requests and send service, security, billing, and operational notices.
- Investigate errors, prevent fraud and abuse, secure accounts, and enforce our agreements.
- Understand service performance and usage and improve features and reliability.
- Measure website marketing and respond to interest in ARK, subject to applicable choices and law.
- Comply with legal obligations, preserve required records, and resolve disputes.
Where a feature requires consent, we obtain it through the applicable flow. This policy does not itself authorize a bank debit, enroll you in SMS, or grant device permissions.
4. Location and Shipment Tracking
Driver applications may collect precise device location, including in the background when the necessary permissions are enabled, to support shipment tracking. We may also receive vehicle locations and tracking events from connected tracking providers. Locations, timestamps, and shipment progress may be visible to the organizations involved in the shipment and recipients of tracking links those organizations share.
You can manage application location permissions through your device settings. Disabling access can interrupt tracking and related features. It does not remove previously recorded events or stop a separate vehicle or third-party tracking source. Contact the organization arranging tracking about its instructions and sharing practices.
5. Financial Connections and Providers
Where you choose to use an available bank-connection feature, the connection flow identifies the provider, purpose, and requested access. Depending on the feature and your authorization, information may include account identifiers and routing details, account-holder information, verification results, balances, or transaction information. We use connected financial information for the disclosed feature, such as verification, payment processing, reconciliation, or fraud prevention, within the scope you authorize.
If a connection is powered by Plaid, Plaid collects and processes information from your financial institution in accordance with the Plaid End User Privacy Policy. Review that policy and the connection notice before proceeding. Plaid and financial institutions may process information for their own disclosed purposes. Provide bank login credentials only through the designated provider or financial-institution flow; do not send them to ARK support.
You may use available connection controls or contact support@arktms.com to request disconnection and cessation of future access by ARK. Your provider or bank may also offer access controls. Disconnection does not by itself erase previously received records, cancel pending payments, or revoke a separate payment authorization. Follow the applicable payment authorization instructions for revocation. See Section 9 for retention and deletion. We do not sell or rent financial information obtained through bank connections or use it for advertising.
6. How We Share Information
- Your organization and intended recipients: authorized workspace users, carriers, brokers, shippers, customers, and other recipients as directed through workflows, integrations, document distribution, and shared links. Recipients may maintain their own copies under their own policies.
- Service providers: providers of hosting, storage, authentication, communications, payment processing, document processing, AI features, monitoring, and support that process information to deliver the relevant services.
- Connected services: accounting, tracking, carrier verification, financial institutions, and other integrations selected by you or your organization. Their processing is also governed by their applicable agreements and privacy notices.
- Website analytics and advertising providers: information described in Section 7 for measuring website use and marketing activity.
- Legal and business matters: when required by law or reasonably necessary to address fraud, security, or threats to rights or safety; with professional advisers; and in connection with a financing, merger, acquisition, or asset transfer, subject to applicable confidentiality and legal requirements.
For example, we use Twilio for SMS delivery and Stripe for subscription payment processing. See Twilio's Privacy Notice and Stripe's Privacy Policy. Provider access depends on the feature used. Some providers also process information for their own legal, security, fraud-prevention, or other disclosed purposes; their notices explain those practices.
7. Cookies, Analytics, Advertising, and Diagnostics
We use cookies and similar browser storage for authentication, preferences, and service operation. Public website pages also use analytics and advertising technologies, including Google Analytics, Google Ads, and OpenAI advertising tools, to measure page visits, campaign attribution, and actions such as demo requests or subscriptions. These providers may receive device identifiers, IP addresses, page and referral details, campaign identifiers, and conversion events. Such disclosures may constitute sharing for targeted advertising under some privacy laws.
Browser settings can restrict or clear cookies and site storage, although doing so may affect login and other functionality and does not necessarily stop all server-side processing. Provider controls are described in Google's partner-site notice and OpenAI's Privacy Policy. Contact support@arktms.com about applicable opt-out rights. We do not sell personal information for money; the advertising disclosures described here are distinct from bank-connection information, which we do not use for advertising.
We use diagnostic and performance tools, including Sentry, to investigate errors and improve reliability. Depending on configuration, diagnostics may include session replay of interface interactions, with text and input masking and media blocking configured to reduce capture of sensitive content. These tools are separate from public-site marketing analytics.
8. AI-Assisted Features
When an AI-assisted feature processes a document, email, prompt, or workflow, relevant content and context may be sent to the AI providers supporting that feature to extract information, generate a response, or perform the requested task. Feature use may also create output, usage, and diagnostic records. Your organization should submit only information it is authorized to process and review outputs before relying on them. Contact us with questions about providers for a particular feature.
9. Retention and Deletion
Retention depends on the category of information, the purpose for which it was collected, your organization's instructions, our agreements, and applicable law. Relevant factors include whether an account or shipment remains active, the need for billing, tax, payment-authorization or consent records, security investigations, disputes, and backup recovery. Different records may therefore remain for different periods.
You may request deletion through support@arktms.com. We may need to verify your identity and, for organization-controlled records, coordinate with the organization. Account cancellation and bank disconnection do not automatically delete all records. Legal, accounting, fraud-prevention, and dispute obligations may require continued retention; backup copies may remain until the applicable backup cycle expires. Copies held by business recipients or independent providers are subject to their own retention practices.
10. Your Choices and Privacy Requests
Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a portable copy of personal information; withdraw consent; object to or restrict processing; or opt out of sale, sharing, or targeted advertising. These rights may be subject to exceptions and identity or authority verification. Where available under law, you may use an authorized agent, appeal a denied request, or complain to your local data protection authority. We do not discriminate against you for exercising applicable privacy rights.
Send requests or appeals to support@arktms.com, identifying your relationship to ARK and the request. Do not include passwords or full bank or tax identifiers. For records controlled by a customer organization, contact its administrator or ask us to help direct your request. We will respond as required by applicable law. Withdrawing consent does not affect prior lawful processing and may limit features that depend on that consent.
You can manage available profile and notification settings, use unsubscribe links in marketing emails, and change device permissions. Necessary account, billing, and security notices may continue when you opt out of marketing.
11. SMS and Text Messaging
We use SMS for opted-in operational communications, including login codes, app setup, support, and load updates. Consent can be recorded through the dispatcher-led verbal consent workflow or another opt-in flow presented to you. Records may include the phone number, consent method and timestamp, authorizing user and organization, script version, load reference, message content, delivery status, and opt-out history. See our SMS Consent and Opt-In Process page.
Message frequency varies with account and load activity. Message and data rates may apply. SMS consent is not a condition of purchase. Reply STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to opt out; reply HELP for help. A confirmation message may follow an opt-out. Contact support if opting out affects login or operational communications.
We use SMS information to deliver messages, manage consent and preferences, provide support, and maintain compliance records. We do not sell or share mobile information or SMS opt-in consent with third parties for their marketing or promotional purposes. We share information as needed with messaging providers such as Twilio, the organization coordinating the operational communication, and as required by law. The website advertising disclosures above do not authorize use of SMS opt-in records for advertising.
12. Security and International Processing
We use administrative and technical measures designed to protect information, including authentication, access controls, and monitoring. No system or transmission method is completely secure. Protect your account credentials and promptly report suspected unauthorized access to support@arktms.com.
ARK operates in the United States, and information may be processed in the United States and other locations where our providers operate. Privacy laws may differ from those in your location. Where applicable law requires safeguards for international transfers, those transfers must be subject to the required safeguards.
13. Children
The Service is intended for adults using it for business purposes, not for children under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact support@arktms.com so we can investigate and take appropriate action, including deletion where required.
14. Changes and Contact
We may update this policy and will revise the date above. We will provide additional notice of material changes through the Service or other appropriate means, and obtain additional consent where required before using information for a new purpose that requires it.
For privacy questions or requests, contact ARK TMS LLC at support@arktms.com.