Privacy Policy

BESH EXPRESS is a motor carrier and logistics company based in the United States. The Service is intended for authorized employees, contractors, and agents of BESH EXPRESS and its affiliates.

Privacy contact: dispatch@besh.us · 220-220-1111
403 S Olathe St, Aurora, CO 80017

Account and authentication data. When you sign in, we collect your username or email, authentication credentials (stored in hashed form through our identity provider), session tokens, and—if enabled—multi-factor authentication (MFA) enrollment data such as TOTP secrets managed by our auth provider.

Fleet and business operations data. The Service processes information needed to run trucking operations, including driver profiles, vehicle and trailer records, compliance documents, fuel transactions, factoring and payment data, safety records, and data imported from connected systems (for example TMS, telematics, fuel card, and factoring portals).

Financial account data via Plaid.If you choose to connect a bank account through Plaid, Plaid collects account information on our behalf according to your selections in the Plaid Link flow. This may include institution name, account name, account type, masked account numbers, routing numbers, balances, and transaction history, depending on the products you authorize. We use this information only for the financial features you request (such as verification, reconciliation, or payment operations). We do not store your online banking username or password. Plaid's handling of data is also described in Plaid's End User Privacy Policy.

Technical and usage data. We automatically receive basic technical information when you use the Service, such as IP address, browser type, device information, and request logs needed for security, troubleshooting, and performance.

• Provide, operate, and maintain the Service
• Authenticate users and enforce access controls, including MFA
• Sync and display fleet, fuel, factoring, and finance data for authorized users
• Process bank account connections and related financial workflows you authorize
• Protect against fraud, abuse, and security incidents
• Comply with legal, regulatory, and contractual obligations
• Improve reliability and support internal business reporting

We do not sell your personal information.

Session cookies. We use essential cookies and similar technologies to keep you signed in, maintain security, and route requests through our hosting provider. These are required for the Service to function.

Local storage.We may store non-sensitive UI preferences (such as light/dark appearance) in your browser's local storage.

Analytics. We do not currently use third-party advertising or web analytics cookies (such as Google Analytics) in the Service. Internal operational metrics and logs may be used to monitor performance and security.

We share information only as needed to operate the Service, including with:

• Service providers that host infrastructure, databases, authentication, or integrations (for example cloud hosting, Supabase, Plaid, mapping, telematics, and payment/fuel partners), under contractual confidentiality and security obligations
• Professional advisors (legal, accounting) when required
• Authorities when required by law, subpoena, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or asset sale, subject to continued protection of your information

We retain information for as long as your account is active, as needed to provide the Service, and as required for business, tax, safety, and legal record-keeping. Bank and financial connection data is retained only as long as needed for authorized features or until you disconnect the account or we no longer require it for a legitimate business purpose. When data is no longer needed, we delete or de-identify it where feasible.

We use administrative, technical, and organizational measures designed to protect information, including HTTPS encryption in transit, role-based access controls, MFA for portal access in production, secrets stored outside source code, and managed cloud infrastructure. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of certain personal information, or to object to or restrict certain processing. To exercise these rights, contact us at dispatch@besh.us. We may need to verify your identity before responding. Authorized users should contact their administrator for account access changes within the Service.

If you connected a bank account through Plaid, you can revoke access through your financial institution or Plaid's consumer portal where available.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.

Questions about this Privacy Policy or our data practices:
BESH EXPRESS
Email: dispatch@besh.us
Phone: 220-220-1111
403 S Olathe St, Aurora, CO 80017