This ACG TMS Privacy Policy ("Policy") explains how Amin Consulting Group, Inc., doing business through ACG TMS ("ACG TMS," "ACG," "we," "us," or "our"), collects, uses, discloses, stores, and protects personal information in connection with the ACG TMS transportation management platform.
It also explains the choices and rights that may be available to individuals and the responsibilities of Customers that submit information about drivers, employees, contractors, customers, brokers, shippers, and other people into ACG TMS.
By using ACG TMS, you acknowledge the practices described in this Policy. This Policy should be read together with the ACG TMS Terms of Use and any written order form, data-processing agreement, or other agreement that applies to your account.
Summary of Key Points
- ACG TMS collects the account, business, operational, document, billing, integration, technical, and support information needed to provide a transportation management system.
- For data a carrier or other Customer places in its workspace, the Customer generally controls why the data is used and ACG TMS processes it to provide the Service.
- ACG TMS does not sell Customer Data for money and does not use authenticated workspace Customer Data for cross-context behavioral advertising.
- Customer Data is not made available to separate ACG products for independent use unless the Customer enables or authorizes the connection, subject to limited security, support, legal, and corporate-administration needs.
- Customers control workspace users and are responsible for having authority to upload personal information about drivers and other people.
- Privacy rights vary by law and may include access, correction, deletion, portability, opt-out, restriction, or appeal rights.
1. Scope of This Policy
This Privacy Policy applies to ACG TMS, the transportation management software platform operated by Amin Consulting Group, Inc., including the ACG TMS website, authenticated application, carrier workspaces, portals, document services, communications, reports, integrations, APIs, and related features that link to this Policy (collectively, the "Services").
This Policy is specific to ACG TMS. It does not automatically govern separate consulting, compliance, advisory, managed services, or other products offered by Amin Consulting Group, Inc. unless those services expressly link to or incorporate this Policy.
2. Our Privacy Roles
ACG TMS processes different categories of information in different roles. For account registration, subscription administration, billing records, platform security, support, service analytics, and our own business operations, Amin Consulting Group, Inc. generally determines why and how personal information is processed and acts as a business or controller to the extent those terms apply under applicable law.
For Customer Data entered, uploaded, imported, synchronized, or otherwise submitted to a carrier or business workspace by a Customer or its Authorized Users, the Customer generally determines the purposes for which that information is used. To the extent required by applicable privacy law, ACG TMS acts as a service provider or processor for that Customer and processes the information to provide the Services and according to the Customer's instructions, our agreements, and applicable law.
If you are a driver, dispatcher, employee, contractor, customer contact, broker contact, shipper contact, or other individual whose information was entered into ACG TMS by a transportation business, that business may be the primary organization responsible for your information. Privacy requests concerning Customer Data may need to be submitted to that organization. We may assist the organization in responding where required.
3. Information We Collect
Depending on how the Services are used, we may process the following categories of information:
Account and user information: name, business email address, business phone number, job title, company affiliation, username or account identifiers, authentication and verification information, workspace role, permissions, communication preferences, and account status.
Business and workspace information: company or carrier name, business contact information, USDOT or MC identifiers where provided, workspace settings, subscription plan, billing contact details, team membership, and administrative records.
Transportation and operational Customer Data: load information, pickup and delivery details, customer, broker and shipper contacts, driver and contractor information, equipment information, dispatch assignments, route or location information when a connected feature is enabled, rate information, billing records, invoice data, settlement data, deductions, payment status, notes, tasks, reports, and other transportation-management records submitted by or for a Customer.
Documents and uploaded content: rate confirmations, bills of lading, proof-of-delivery documents, invoices, settlement records, equipment or driver documents, images, attachments, notes, and other files uploaded to or generated through the Services.
Communications and support information: messages, emails or other communications sent through connected features, support requests, feedback, implementation communications, and records of interactions with our support team.
Billing and transaction information: subscription status, plan, transaction identifiers, invoices, payment status, and limited payment-method details made available by our payment provider. Complete payment card numbers are generally processed by the payment provider rather than stored directly by ACG TMS.
Connected-service information: data received from or sent to third-party services that a Customer or Authorized User chooses to connect, such as accounting, payment, factoring, telematics, ELD, mapping, communications, document, identity, or other transportation-related services.
Technical and usage information: IP address, browser type, device type, operating system, timestamps, session activity, authentication events, audit logs, referring pages, application events, diagnostics, crash information, feature usage, and security-related logs.
Cookie and similar technology information: identifiers and settings used to maintain sessions, remember preferences, secure accounts, understand service performance, and, where used and legally permitted, measure website engagement.
4. Sensitive and Regulated Information
Some Customer Data may be considered sensitive personal information under applicable law, depending on the feature used and the information a Customer chooses to provide. Examples may include government-issued identification numbers, driver's license information, financial information, or precise geolocation when location-enabled integrations are used.
We process sensitive information only as reasonably necessary to provide requested features, secure the Services, comply with law, or as otherwise authorized. ACG TMS does not require Customers to upload unrelated highly sensitive information. Customers should not upload Social Security numbers, medical records, account passwords, full payment-card credentials, or other highly sensitive information unless a specific ACG TMS feature expressly requests that information and the Customer is legally authorized to provide it.
We do not use Customer Data to infer sensitive traits such as race, religion, sexual orientation, or political beliefs for advertising or profiling.
5. Sources of Information
We may receive information directly from you; from the Customer or workspace administrator that creates or manages your account; from other Authorized Users; from documents and files uploaded to the Services; from connected third-party services that a Customer enables; automatically from devices, browsers, cookies, logs, and security systems; from payment and authentication providers; and from public business or governmental sources when a feature is designed to retrieve or verify business information.
If a Customer connects an external service, the information we receive is governed by the Customer's instructions, the permissions granted to that connection, this Policy, and the external provider's own terms and privacy practices.
6. How We Use Information
We may process information to provide, operate, maintain, secure, and support ACG TMS; create and administer accounts and workspaces; authenticate users and enforce permissions; process loads, dispatch records, documents, invoices, settlements, reports, and other requested workflows; deliver notifications and communications; process subscriptions and billing; provide customer support; troubleshoot and improve reliability; prevent fraud, abuse, unauthorized access, and security incidents; maintain audit and activity records; comply with legal obligations and valid legal process; enforce our Terms of Use and other agreements; protect the rights, safety, and integrity of ACG TMS, Customers, Users, and others; and perform other purposes disclosed at the time information is collected or with appropriate authorization.
We may use aggregated or de-identified information to understand service performance, improve workflows, plan capacity, analyze product usage, and develop features, provided that such information is not reasonably used to identify an individual.
7. Document Processing and Automated Features
ACG TMS may use automated processing to extract, organize, classify, validate, compare, or display information from documents and records submitted to the Services. Examples may include extracting fields from rate confirmations, identifying possible duplicate loads or documents, calculating totals, generating reports, or suggesting structured data for a User to review.
These features process the content necessary to perform the requested function. Customers and Authorized Users remain responsible for reviewing extracted or generated information before relying on it for operational, financial, contractual, tax, safety, or regulatory purposes.
We do not use Customer Data submitted inside a workspace for cross-context behavioral advertising.
8. How We Disclose Information
We may disclose personal information only as reasonably necessary for the purposes described in this Policy, including to:
Service providers and subprocessors that help us provide hosting, storage, databases, authentication, cybersecurity, email or communications, payments, document processing, analytics, logging, support, or other infrastructure. These providers may process information only for contracted purposes and subject to appropriate obligations.
Connected services and business partners at the Customer's direction when a Customer or Authorized User enables an integration, sends information to a third party, or requests a connected feature.
Authorized workspace users according to roles, permissions, assignments, and sharing actions configured by the Customer or its administrators.
Professional advisers, auditors, insurers, and consultants where reasonably necessary for legitimate business, security, compliance, or legal purposes and subject to appropriate confidentiality obligations.
Government authorities, courts, regulators, law enforcement, or other parties when we reasonably believe disclosure is required by law, valid legal process, or necessary to protect rights, safety, security, or prevent fraud or abuse.
A successor or transaction participant in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to appropriate confidentiality and legal requirements.
9. No Sale of Customer Data; Advertising
ACG TMS does not sell Customer Data or personal information for monetary consideration. We do not use Customer Data submitted inside authenticated carrier or business workspaces for cross-context behavioral advertising or to build advertising profiles unrelated to providing ACG TMS.
Our public-facing service pages may use limited analytics or similar technologies to understand visits and improve the website. If we ever engage in an activity that constitutes a sale, sharing for cross-context behavioral advertising, or targeted advertising under an applicable privacy law, we will provide the disclosures and choices required by that law before or when the activity applies.
10. Other ACG Products and Internal Separation
ACG TMS may be operated within the same corporate organization as other Amin Consulting Group products or services. Customer Data from ACG TMS is not made available to separate ACG products, including ACG Safety or ACG CORE, for their independent use unless the Customer enables or requests the connection, otherwise provides authorization, or disclosure is necessary for shared security, support, legal compliance, or corporate administration consistent with this Policy.
Enabling an integration or data-sharing feature may cause information to move between products as described at the time of connection. Customers are responsible for reviewing the scope of the connection and ensuring they have authority to share the affected information.
11. Workspace Permissions, Sharing, and Public Links
Customers control access to their workspace through user invitations, roles, permissions, assignments, and other access settings. Workspace administrators are responsible for granting appropriate access and promptly removing access when it is no longer needed.
Some features may allow a User to create or send document links, exports, reports, emails, or other records to people outside the workspace. Depending on the feature and settings, anyone who receives or can access a shared link may be able to view the associated content. Customers and Users should not create public or broadly shareable links for sensitive information unless appropriate for the intended business purpose.
We may maintain audit records of access, changes, sharing actions, and administrative events for security, support, compliance, and dispute-resolution purposes.
12. Third-Party Integrations and Services
The Services may connect with third-party products at a Customer's direction. When a Customer enables a connection, ACG TMS may send information to or receive information from that provider as necessary to provide the requested integration.
Third-party providers operate under their own terms and privacy policies. ACG TMS is not responsible for a third party's independent privacy practices. Customers should review the provider's permissions and policies before enabling an integration and should disconnect integrations that are no longer needed.
13. Cookies and Similar Technologies
We may use cookies, local storage, session identifiers, pixels, and similar technologies for essential authentication, account security, fraud prevention, preference storage, service functionality, diagnostics, and analytics.
You may be able to control non-essential cookies through browser settings or a consent mechanism where one is provided. Blocking essential cookies may prevent portions of ACG TMS from functioning correctly. Where applicable law requires recognition of a legally valid opt-out preference signal for covered advertising or sale activities, we will handle such signals as required by law.
14. Data Retention
We retain personal information for as long as reasonably necessary to provide the Services, maintain the Customer relationship, fulfill the purposes described in this Policy, comply with legal, tax, accounting, contractual, security, and dispute-resolution obligations, and enforce our agreements.
Customer Data may remain available while a workspace is active. After account or subscription termination, Customer Data may be deleted, de-identified, or retained for a limited period based on backup cycles, security requirements, legal obligations, support needs, and applicable agreements. Backup copies may persist until they are overwritten or deleted through ordinary backup processes.
Customers are responsible for exporting or maintaining independent copies of records that they are legally or contractually required to retain. ACG TMS is not a substitute for a Customer's required record-retention or archival program.
15. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, misuse, alteration, loss, or disclosure. Safeguards may include authentication and access controls, permission management, secure transmission methods, logging and monitoring, backups, vulnerability and incident-response practices, and vendor-security measures appropriate to the nature of the Services.
No method of electronic transmission, storage, or security is completely secure. We therefore cannot guarantee absolute security. If we become aware of a security incident involving personal information, we will investigate and provide notices to affected parties or authorities when required by applicable law.
Customers and Users also play an important role in security. They are responsible for securing their devices and email accounts, protecting credentials, using required multi-factor authentication or verification controls, limiting permissions, and promptly reporting suspected unauthorized access.
16. Customer Responsibilities for Personal Information
A Customer that submits personal information about drivers, employees, contractors, customers, brokers, shippers, or other individuals represents that it has a lawful basis and appropriate authority to collect, use, and provide that information to ACG TMS for the Customer's business purposes.
Customers are responsible for providing any privacy notices, obtaining any consents, honoring privacy rights, and complying with employment, transportation, communications, record-retention, and data-protection laws that apply to their own collection and use of Customer Data.
Customers should configure roles and permissions according to job responsibilities and should avoid collecting or retaining information that is not reasonably necessary for their use of ACG TMS.
17. Your Privacy Rights
Depending on where you live and which privacy laws apply, you may have rights concerning personal information, which can include the right to request access, confirmation, correction, deletion, portability, or a copy of information; to object to or restrict certain processing; to opt out of certain sales, sharing, targeted advertising, or profiling; to limit certain uses of sensitive personal information; to withdraw consent where processing is based on consent; and to appeal certain decisions on a privacy request.
These rights are not absolute and may be subject to legal exceptions, identity verification, record-retention requirements, security needs, and the role in which ACG TMS processes the information.
If your request concerns information controlled by your employer, carrier, or another Customer, we may direct you to that organization or forward the request where appropriate. If ACG TMS is responsible for the information, you may submit a request to support@aminconsultinggroup.com. We may request information necessary to verify your identity and authority before completing a request.
Where applicable law permits an authorized agent to submit a request, we may require evidence of the agent's authority and may verify the request directly with the individual. We will not discriminate against you for exercising a privacy right protected by law.
18. United States State Privacy Notices
Residents of certain U.S. states may have additional privacy rights under state law. To the extent an applicable law covers ACG TMS and your information, the categories of personal information we collect, our business purposes, the sources of information, and the categories of recipients are described in this Policy.
We do not sell personal information for monetary consideration and do not use authenticated workspace Customer Data for cross-context behavioral advertising. Where an applicable state law provides a right to opt out of activities we do conduct, we will provide an appropriate mechanism and honor valid requests as required by law.
Sensitive personal information is used only for purposes reasonably necessary to provide requested Services, maintain security, comply with law, and other purposes permitted by applicable law unless additional consent or choice is required.
19. EEA, United Kingdom, and Switzerland
If the GDPR, UK GDPR, or similar European data-protection law applies to our processing, our legal bases may include performance of a contract, legitimate interests in providing and securing the Services, compliance with legal obligations, protection of vital or legal interests where applicable, and consent when required.
Individuals may have rights to access, correction, deletion, restriction, objection, portability, and withdrawal of consent, subject to applicable exceptions. You may also have the right to lodge a complaint with the data-protection authority in your country. When ACG TMS processes Customer Data on behalf of a Customer, the Customer may be the appropriate controller to contact first.
20. International Processing and Transfers
ACG TMS is operated from the United States. We and our service providers may process information in the United States and other locations where we or they operate. Privacy laws in those locations may differ from the laws where you live.
Where applicable law requires safeguards for international transfers of personal information, we will use legally recognized transfer mechanisms or other appropriate safeguards as required.
21. Children
ACG TMS is a business service and is not directed to children. Users must be at least 18 years old to create or use an ACG TMS account unless we expressly authorize otherwise in writing for a lawful business purpose.
We do not knowingly collect personal information directly from children under 13 through the Services. If we learn that we have collected such information directly from a child in a manner not permitted by law, we will take reasonable steps to delete it.
22. Third-Party Websites and External Content
The Services may contain links to third-party websites, applications, maps, payment portals, file services, or other external resources. This Policy does not govern a third party's independent collection or use of information. Review the third party's privacy policy before providing information to it.
23. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the Services, our practices, or applicable requirements. The most recent revision date and version will appear at the top of the Policy.
If a change materially affects how we use personal information, we will provide notice through the Services, by email, or by another reasonable method when required by law. Continued use of the Services after an updated Policy becomes effective is subject to applicable law and our Terms of Use.
24. Contact Us
Questions about this Privacy Policy, privacy requests, account security, or our handling of personal information may be sent to support@aminconsultinggroup.com.
ACG TMS is operated by Amin Consulting Group, Inc. The official ACG TMS service address is https://tms.aminconsultinggroup.com.