Legal
Privacy Policy
Arco Transportation is an internal company system operated by Arco Group. It is not offered to the general public. Accounts are issued only to Arco Group employees (office staff, foremen, dispatchers) and to drivers who operate Arco-contracted vehicles. We do not collect data from members of the public.
1. Who we are
"Arco", "we", "us" or "our" refers to Arco Group, a company operating in the United Arab Emirates. Arco Transportation is the internal logistics platform our staff uses to coordinate the movement of cargo and labor between our warehouses, projects, and labor camps. The system is hosted at transport.arco-ts.org and is administered by Arco Group's IT team.
For any privacy question, contact us at it@arcogroup.org.
2. Who this policy applies to
This policy describes how we handle personal information that belongs to our own staff and contracted drivers while they use Arco Transportation. It does not describe a service offered to consumers.
- Employees — office staff, foremen and dispatchers who hold an Arco employee code.
- Drivers — drivers of cargo and labor vehicles operated under Arco contracts.
3. What data we collect
While running the system we collect and store:
- Profile data — full name, Arco employee code, mobile phone number, role (foreman, driver, dispatcher, admin), division, preferred language, and (for drivers) the vehicle assigned to them.
- Authentication data — the salted hash of the user's password and the timestamp of their last sign-in.
- Operational data — the cargo or labor requests a user creates, the dispatches assigned to them, status changes, the date and time of each event, and any free-text notes the user enters.
- Media — photos and voice notes the user uploads inside a request (e.g. a photo of the cargo, a proof-of-delivery photo, a voice note describing the job).
- Location data — for projects, warehouses and ad-hoc pickup/drop-off points the user selects on a map. Live vehicle position from Arco's Cartrack GPS account is shown to dispatchers but is owned by Arco's fleet operator, not by individual users.
- WhatsApp messaging data — when the system sends a WhatsApp message via the Meta WhatsApp Business Platform to one of our drivers or foremen (and when they reply), the message content, message status (sent / delivered / read) and the recipient's mobile number are stored so the workflow can run end-to-end.
- Technical logs — IP address, browser user-agent and access timestamps, kept for operational and security purposes.
We do not collect government IDs, payment card data, biometric data, family information, or any data unrelated to the logistics workflow.
4. How we use the data
The data is used only to run the company's logistics workflow:
- Authenticate the user and personalise their screen for their role.
- Route cargo and labor requests to the right dispatcher.
- Send dispatch information to the assigned driver — including over WhatsApp through the Meta WhatsApp Business Platform.
- Track the status of each trip and produce internal reports for Arco's management and project billing.
- Keep an audit trail of operational events for safety and accountability.
We do not use the data for advertising, do not sell it, and do not share it with any third party for marketing.
5. Sharing and processors
Personal data is processed only by Arco staff who need it for their job. We share a minimum amount of data with the following service providers, who act as data processors on our behalf:
- Meta Platforms, Inc. — to deliver WhatsApp messages to Arco's own drivers and foremen via the WhatsApp Business Platform. Only the recipient's mobile number and the message content are shared.
- Cartrack — Arco's fleet GPS provider. We read live vehicle positions through their API so dispatchers can see where a vehicle is.
- OpenAI — used to transcribe a foreman's optional voice note into text and to translate WhatsApp messages into the recipient's preferred language. Voice notes and text are sent over a secure connection and are not retained by us for AI training.
- Hosting infrastructure — a UAE-region virtual server that hosts the application and database.
6. How long we keep data
Operational data (requests, dispatches, status changes, attached media) is retained for as long as the user has an active account with Arco, plus the period required for internal audit (typically up to 7 years). When a user leaves Arco their account is disabled; the historical records they created remain in the system because they form part of the company's operational history.
7. Security
The application is served over HTTPS only. Passwords are hashed with bcrypt. The database is not exposed to the public internet. Access to admin tools is restricted by role. Uploaded media is stored in a private directory and is served only to authenticated users via the application's upload routes.
8. Your choices as an Arco user
Because the system is provided by Arco for work purposes, accounts and data are managed by Arco's IT and HR teams. If you would like to view or correct the data we hold about you, or have any other privacy concern, contact your dispatcher or write to it@arcogroup.org.
9. Children
Arco Transportation is a workplace tool. We do not provide accounts to anyone under 18 and we do not knowingly collect data from children.
10. Changes to this policy
We will update this page if the way we handle data changes. The "Last updated" date at the top of the page always reflects the current version.
11. Contact
Arco Group · United Arab Emirates · it@arcogroup.org