This Privacy Policy explains how Helkore collects, uses, stores, and protects information across its web platform, mobile applications (Android and iOS), and public website, in compliance with Peruvian Personal Data Protection Law (Law No. 29733), its Supreme Decree No. 003-2013-JUS, and applicable security standards.

1. Scope and Processing Roles

To ensure clear and transparent data management, we distinguish between two legal roles:

Helkore as Data Controller: We process contact and billing details of company representatives, administrators, and subscribing users to manage business relationships, provide technical support, and maintain software subscriptions.
Helkore as Data Processor: For operational business data uploaded and managed by client companies (including driver records, vehicles, end customers, vendors, dispatch routes, inventory, and invoices), the client company acts as the Data Controller, and Helkore acts strictly as a Data Processor, handling data solely in accordance with client instructions and the agreed service contract.

2. Information We Collect Across System Capabilities

Helkore collects only data strictly necessary to deliver the activated services:

Account & Administration: First and last name, business email address, phone number, job title, company name, tax ID (RUC), and encrypted access credentials.
Transport, Routes & Fleets: Vehicle technical specifications (license plate, make, model, mandatory SOAT insurance policy, technical inspection certificates, and maintenance logs) along with assigned driver records (name, national ID/driver's license, and scheduled shifts).
GPS Geolocation & Route History: Real-time geographic coordinates transmitted by paired GPS devices or through the mobile app during active trips, used solely for stop supervision, cargo security, and delivery route verification.
Driver Mobile App & Route Operations:
- Proof of Delivery (PoD): Photos of loaded cargo, packages, and stamped physical waybills captured directly via the device camera.
- On-Screen Signatures: Digital signature strokes captured on screen from the recipient, along with their name and national ID (DNI).
- Cash on Delivery: Collected amounts, payment method (cash, bank transfer, or QR code), and photo of the transaction receipt.
- Offline Mode: Encrypted local storage on the mobile device (Android / iOS) to record deliveries, tasks, and route incidents in cellular dead zones, automatically syncing once connection is re-established.
Document Automation with Artificial Intelligence (OCR): PDF files or images of shipper waybills uploaded voluntarily to automatically extract dispatch information (tax IDs, sender, recipient, weight, items, and pickup/drop-off locations).
Sales, Inventory Ledger (Kardex) & Invoicing: Product catalog, stock inflows/outflows by variant, customer and supplier directories, and official electronic receipts (invoices and bills) validated with the National Tax Authority (SUNAT) through an authorized electronic service provider (PSE/OSE).

3. Mobile Application Device Permissions (Android & iOS)

To perform route tasks and delivery operations, the mobile app requests the following device permissions:

Precise Location: Used exclusively during active transport services to log arrival at stops, record road incidents with GPS coordinates, and provide logistics visibility to dispatch.
Camera: Required solely to capture delivery evidence, physical stamped documents, and payment receipts.
Local Storage: Required to temporarily queue operational records while vehicles travel through offline areas without internet reception.

Helkore never accesses personal contacts, microphones, private messages, or personal photo libraries unrelated to logistical services.

4. Artificial Intelligence Confidentiality Commitment

AI extraction technology implemented within Helkore operates under strict privacy safeguards:

Processed documents are used solely to autofill carrier waybills and accelerate your team's workflow.
No Public AI Training Guarantee: Your waybills, customer data, pricing, and commercial routes are never used to train public machine learning models nor shared with unauthorized third parties.

5. Data Security and Retention

We implement technical, organizational, and legal security safeguards against unauthorized access, loss, or alteration:

Encrypted data transmission across all services using TLS 1.3 / HTTPS.
Organization-level database isolation with role-based access control (RBAC).
Passwords stored using one-way cryptographic hashing algorithms.
Data is retained for the duration of the contractual agreement and minimum periods required by applicable law (e.g., 5 years for tax-relevant invoices under Peruvian tax regulations).

6. Service Providers and Third-Party Disclosures

Helkore does not sell, rent, or trade personal data. Information is disclosed only to:

Cloud hosting and database providers acting as data processors under strict confidentiality contracts.
Authorized electronic billing providers (PSE/OSE) and SUNAT for mandatory fiscal validation of waybills and invoices.
Competent administrative or judicial authorities when legally required by binding official order.

7. Your Privacy Rights (ARCO Rights)

Under Peruvian Personal Data Protection legislation, individuals hold enforceable rights of Access, Rectification, Cancellation, and Opposition (ARCO):

Access: Inquire about what personal information is held by the system.
Rectification: Request correction or updates for inaccurate or incomplete data.
Cancellation: Request deletion when data is no longer necessary for its original purpose, subject to legal retention obligations.
Opposition: Object to processing when legitimate grounds exist.

To exercise these rights, individuals or legal representatives may email hola@helkore.com with their full name, identification document (ID or passport), and specific request details. Requests are handled within statutory legal deadlines.

8. Account and Data Deletion Requests

Client company administrators may request permanent account closure and deletion of associated data by contacting our official support email. For mobile driver accounts, user lifecycle management is handled directly through the employer company administrator.

9. Contact Information

For any questions, clarifications, or privacy inquiries regarding your data in Helkore, please contact us at hola@helkore.com.