Privacy Policy

1. Introduction

ArrivalLink is operated by Party Plug LLC ("Company," "we," "us," or "our"). We are committed to protecting the privacy of our users and the individuals whose data is processed through our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have regarding your data.

This policy applies to all users of the ArrivalLink platform, including business administrators, technicians, and end customers who interact with our tracking pages. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your full name, email address, phone number (optional), and password. If you register a company, we also collect your company name. Passwords are cryptographically hashed and are never stored in plain text.

2.2 Company & Branding Information

Business administrators may provide company details including company name, logo image, brand color, website URL, and a service location address with geographic coordinates. This information is used to customize customer-facing tracking pages and the administrative dashboard.

2.3 Technician Profile & Vehicle Information

Technician accounts may include a profile photo and vehicle details such as make, model, year, color, and vehicle photo. Technician names are displayed in abbreviated form (first name and last initial) on customer-facing tracking pages to balance identification with privacy.

2.4 Location Data

During active service trips, we collect real-time GPS location data from technician devices, including latitude, longitude, speed, and timestamps. This data is collected at regular intervals and is used to provide live tracking, estimated arrival times, and driving behavior analytics. Location tracking occurs only during active trips and ceases when a trip is marked as completed or cancelled. We do not track technician location when they are not on an active trip.

2.5 Customer Data

When businesses use ArrivalLink to manage service visits, they enter customer information including customer names, phone numbers, and destination addresses. This data is provided by the business and is processed by us solely to deliver the Service. Businesses are responsible for obtaining appropriate consent from their customers before entering their information into the platform.

2.6 Ratings & Reviews

End customers may submit a star rating (1 to 5) and an optional text comment after a service visit. This information is associated with the technician who performed the service and is visible to the business administrator. No account is required to leave a rating.

2.7 Usage & Device Information

We automatically collect standard technical information when you access the Service, including your IP address, browser type and version, device type, operating system, referring URL, pages visited, and timestamps of access. This information is used for security, analytics, and service improvement.

2.8 Payment Information

When you subscribe to a paid plan, payment is processed by Stripe, Inc. We do not directly collect, store, or have access to your full credit card number or bank account details. All payment data is handled by Stripe in accordance with PCI-DSS standards. Please refer to Stripe's Privacy Policy for information about how they handle your payment data.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including real-time tracking, SMS notifications, job scheduling, and fleet management
• Process subscription payments and manage your account
• Generate driving behavior analytics and performance metrics for business administrators
• Display customer-facing tracking pages with live location, estimated arrival time, and company branding
• Facilitate customer rating and review collection, including routing to third-party review platforms when configured
• Send transactional communications, including SMS tracking links to customers and account-related notifications
• Monitor and improve the security, reliability, and performance of the Service
• Enforce our Terms of Service and protect against fraud or abuse
• Comply with legal obligations and respond to lawful requests from authorities

4. Location Data & GPS Tracking

Location data is central to how ArrivalLink works. We want to be transparent about how it is collected and used:

• When collected: GPS data is collected only when a technician has an active trip in progress. Tracking begins when a trip is started and ends when the trip is completed or cancelled.
• What is collected: Latitude, longitude, speed (in meters per second), and a timestamp for each position update.
• How it is used: To display the technician's live location on customer tracking pages, calculate estimated arrival times and distances, and generate driving behavior analytics (speed analysis, braking patterns, acceleration events).
• Who can see it: Real-time location is visible to the business administrator via the fleet dashboard and to the customer via their tracking link during the active trip. Historical trip routes are accessible only to the business administrator.
• Third-party processing: Location coordinates are sent to Mapbox for map rendering, geocoding, and route calculations. Please refer to Mapbox's Privacy Policy for information about how they handle location data.

Business administrators are responsible for informing their technicians that location tracking will occur during active trips and for obtaining any consents required under applicable law.

5. SMS Communications

The Service enables businesses to send SMS messages to their customers containing links to real-time tracking pages. These messages are sent on behalf of the business, not on behalf of ArrivalLink. We process customer phone numbers solely for the purpose of delivering these messages.

We do not use customer phone numbers for marketing purposes or share them with third parties for their own marketing use. Businesses are responsible for ensuring they have appropriate consent from customers before sending SMS messages through the Service.

6. Customer Data Processing

ArrivalLink acts as a data processor on behalf of the businesses (data controllers) that use our platform. When a business enters customer information into the Service — including names, phone numbers, and addresses — we process that data solely to provide the Service.

We do not independently use, sell, rent, or share customer data for any purpose other than delivering the Service to the business that submitted it. The business that enters customer data is responsible for their own privacy obligations to their customers, including providing notice and obtaining consent as required by applicable law.

7. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers: We use trusted third-party services to operate the platform, including payment processing (Stripe) and mapping services (Mapbox). These providers receive only the data necessary to perform their functions and are contractually bound to protect it.
• Within your organization: Business administrators can view data related to their company, including technician profiles, trip history, customer ratings, and driving analytics. Technicians can view their own data and assigned jobs.
• Customer-facing pages: When a tracking link is shared with a customer, limited information is displayed on the public tracking page, including the technician's first name and last initial, profile photo, average rating, company branding, and real-time location during the active trip.
• Third-party review platforms: If a business configures the review gate feature, customers who leave positive ratings may be prompted to leave reviews on platforms such as Google, Yelp, or Facebook. This redirect is optional for the customer, and no personal data is automatically shared with these platforms.
• Legal requirements: We may disclose information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain your authenticated session and remember your preferences. These are essential cookies required for the Service to function. We do not currently use third-party advertising or analytics cookies.

You can configure your browser to refuse cookies, but doing so may prevent you from using certain features of the Service, including signing in to your account.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention practices include:

• Account data: Retained for the duration of your account. When a technician account is removed by an administrator, the associated profile and authentication data are deleted.
• Trip and location data: Trip records, position history, and driving analytics are retained as part of the business's historical records for as long as the company account is active.
• Customer data: Customer names, phone numbers, and addresses associated with trips are retained as part of trip records.
• Ratings and reviews: Retained as part of the business's service history.
• After account closure: Following account termination, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements. Data that is no longer needed will be deleted or anonymized.

10. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Cryptographic hashing of passwords (we never store plain-text passwords)
• Row-level security policies to ensure users can only access data within their own organization
• Role-based access controls separating administrator and technician permissions
• Secure token-based authentication with session management

While we take reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

11. Your Rights & Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: You can access and review your personal information through your account settings at any time.
• Correction: You can update your profile information, including your name, phone number, and company details, directly within the Service.
• Deletion: You may request deletion of your account and associated personal data by contacting us. Business administrators can remove technician accounts, which deletes the technician's profile and authentication data.
• Data portability: You may request a copy of your data in a commonly used format by contacting us.
• Opt-out of communications: You can opt out of non-essential communications at any time.

To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

If you are an end customer of a business that uses ArrivalLink and wish to exercise your rights regarding data the business has entered about you, please contact the business directly. We process that data on their behalf and will assist them in fulfilling your request.

12. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly. If you believe that a child under 18 has provided us with personal information, please contact us immediately.

13. State-Specific Disclosures

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information as defined under the CCPA/CPRA.

Nevada Residents

Under Nevada law (NRS 603A), you have the right to opt out of the sale of your covered personal information. We do not sell your personal information as defined under Nevada law. If you wish to submit an opt-out request, please contact us using the information below.

14. International Data

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and make reasonable efforts to notify you via email or through the Service. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

ArrivalLink
Email: privacy@arrivallink.com

We will respond to your inquiry within a reasonable timeframe. If you are not satisfied with our response, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction.