Last Updated: November 12, 2026
RCO Privacy Statement
RCO is committed to protecting your privacy. This privacy statement applies to data collected by RCO through your use and administration of the RCO Services.
Notice to Users: This privacy statement is written for the organization or company (our "customers") that contracts with RCO for the Services. All references to "you" or "your" in this privacy statement are to our customers. End users of the Services should generally direct privacy-related inquiries to the organization or company that provides them access. End users may also contact RCO directly using the contact information below for account and data deletion requests.
The Services include RCO web portals, RCO mobile applications, and RCO server programs.
Not every Service collects every type of data described below. The data collected depends on the specific Service, device permissions, and features used.
Customer Data
Customer Data is all data, including text, sound, image files, and software that you provide, or that are provided on your behalf, to RCO through your use of the Services. Customer Data does not include Administrator Data, Payment Data, or Support Data, as defined below.
As described in your agreement(s), we only use Customer Data to provide the Services. This may include troubleshooting aimed at preventing, detecting, and repairing problems affecting the operation of the Services, and improving features related to detecting and protecting against emerging threats (such as malware or spam).
Administrator Data
Administrator Data is information about administrators (including account contact and subscription administrators) provided during sign-up, purchase, or administration of the Services. This may include name, address, phone number, and email address, whether collected at initial purchase or later during management of the Services.
Administrator Data is used to complete the transactions you request, administer your account, improve the Services, and detect and prevent fraud. In limited circumstances, we may share Administrator Data with third parties for purposes of fraud prevention.
We may contact you to provide information about subscriptions, billing, and other important updates about the Services, including security or technical matters. We may also contact you regarding third-party inquiries we receive regarding your use of the Services, as described in your agreement(s). You will not be able to unsubscribe from these communications. Subject to your contact preferences, we may also contact you regarding information and offers about other RCO products and services, or to request your feedback.
To manage your contact preferences or update your information, please visit your personal settings page in the Services where available.
Payment Data
RCO bills monthly via electronic mail to your accounting department.
Support Data
Support Data is the information we collect when you submit a support request or run an automated troubleshooter, including information about hardware, software, and other details related to the support incident, such as: contact or authentication information, chat session personalization, information about the condition of the computer and the application when the fault occurred and during diagnostics, system and registry data about software installations and hardware configurations, and error-tracking files.
Support may be provided through phone, e-mail, or online chat. We may use Remote Access (RA), with your permission, to temporarily navigate your desktop. Phone conversations, online chat sessions, or RA sessions with support professionals may be recorded and/or monitored. For RA, you may also access the recording after your session. For Online Chat or RA, you may end a session at any time.
We use Support Data as described in this privacy statement, to resolve your support incident, and for training purposes.
Account and Profile Data
Depending on the Service, RCO may collect account and profile information such as:
- Username and authentication credentials or tokens
- Name and contact details
- Role, organization, or user identifiers
- Account preferences and settings
This information is used to authenticate users, provide access to the Services, administer accounts, and support customer organizations.
Location Data
Certain RCO Services may access and collect precise and/or approximate location data from a user's device.
What location data may be accessed or collected
- GPS coordinates
- Latitude and longitude
- Approximate and precise device location
- Related location information used for maps, navigation, geofencing, field operations, or operational tracking
Where required for the Service and permitted by the user, location may be collected while the Service is in use and, in some cases, while a mobile application is running in the background.
Why location data may be collected
Location data may be used to:
- Provide operational, compliance, mapping, navigation, or field-service functionality
- Record activity related to job, trip, duty, inspection, or service workflows
- Support geofencing and related operational features
- Transmit location information to RCO servers so authorized administrators within the customer organization can view and manage operations
How location data is used and shared
Location data may be transmitted to RCO servers and stored as part of providing the Services to the customer organization. Location data may be shared with the customer organization as needed to operate the Services. We do not sell location data.
User control
Users can control location permissions through device settings. If location permission is denied, features that depend on location may not function properly.
Device, Network, and Technical Data
Depending on the Service and device permissions, we may collect:
- Device model, operating system, and app/version information
- Network status and connectivity information
- Device or installation identifiers needed for authentication, diagnostics, or service operation
- Crash logs, diagnostics, and performance data
- IP address and similar technical data
This information is used to operate, secure, maintain, and improve the Services.
Camera, Photos, Media, and Files
Certain Services may access the camera or allow users to upload photos, documents, audio, video, or other files. This may include inspection photos, receipts, forms, attachments, surveillance-related media where enabled, and other operational records.
Such content is used only to provide the requested Service features and is stored/processed as Customer Data for the customer organization.
Audio and Microphone Data
Certain Services may access the microphone for supported features such as voice input, speech-related functionality, communications, or operational workflows. Audio is used only as needed to provide those features.
Bluetooth and Connected Devices
Certain Services may use Bluetooth or similar connectivity to communicate with supported hardware, sensors, peripherals, or other connected devices. Related device identifiers and connection data may be processed as needed to provide those features.
Contacts and Calendar Data
Where enabled by the Service and permitted by the user, certain Services may access contacts and/or calendar information to support communication, scheduling, or operational workflows. This data is used only for those Service features.
Cookies and Similar Technologies
The Services may use cookies and similar technologies, such as web beacons, for purposes including:
- Storing users' preferences and settings
- Sign-in, authentication, and fraud detection
- Site analytics
Most browsers accept cookies by default. Users may modify browser settings to block or limit cookies. Doing so may affect some Service features.
Sharing Your Information
We will not disclose Customer Data, Administrator Data, or Payment Data ("your information") outside of RCO, except:
- As needed to provide the Services to the customer organization
- To service providers who assist us in operating the Services, under appropriate confidentiality obligations
- When required by law, regulation, legal process, or governmental request
- To detect, prevent, or address fraud, security, or technical issues
RCO does not sell your information.
Partners
RCO will not share your information outside your organization, except as described in this privacy statement.
Security
If we become aware of any unlawful access to any Customer Data stored on our equipment or in our facilities, or unauthorized access to such equipment or facilities resulting in loss, disclosure, or alteration of Customer Data (each a "Security Incident"), we will:
- Notify you of the Security Incident
- Investigate the Security Incident and provide you with information about the Security Incident
- Take reasonable steps to mitigate the effects and minimize any damage resulting from the Security Incident
You agree that:
- An unsuccessful Security Incident will not be subject to this Section. An unsuccessful Security Incident is one that results in no unauthorized access to Customer Data or to any of our equipment or facilities storing Customer Data. This may include, without limitation, pings and other broadcast attacks on firewalls or edge servers, port scans, unsuccessful log-on attempts, denial of service attacks, packet sniffing (or other unauthorized access to traffic data that does not result in access beyond IP addresses or headers), or similar incidents.
- Our obligation to report or respond to a Security Incident under this Section is not and will not be construed as an acknowledgement by RCO of any fault or liability with respect to the Security Incident.
- Notification of a Security Incident, if any, will be delivered to one or more of your administrators by any means we select, including via email. It is your sole responsibility to ensure your administrators maintain accurate contact information on the RCO Services portal at all times.
Account Deletion and Data Deletion
If you have an account used to access any RCO Service (web or mobile), you may request deletion of your account and associated personal data.
How to request account and data deletion
Email: royn@rco.com
Subject line: Account Deletion Request – RCO Services
Please include:
- Your full name
- Username / user ID / account identifier
- Company / organization name
- The email address associated with your account (if any)
- The Service you use, if known
- A clear statement that you are requesting account and data deletion
You may also mail a written request to:
RCO Services
2170 Georgina Avenue
Santa Monica, CA 90402
Office: 310-451-3735
What happens after you request deletion
After we receive a valid request and verify identity/account ownership:
- We will process deletion of the account and associated personal data
- We will generally complete the request within 30 days, unless a longer period is required for verification, technical processing, or legal/compliance obligations
- We will confirm completion when possible using the contact information provided
Data that may be retained
Certain data may be retained where required by law, regulation, industry compliance obligations, fraud prevention, security, dispute resolution, or contractual requirements with the customer organization. Where retention is required, we retain only what is necessary and for only as long as required.
In-product requests
Where available, users may also initiate an account deletion request from within the applicable Service settings/help/support options, or by contacting their company administrator and/or RCO support.
Users do not need to reinstall a mobile application to request account deletion. A request can be submitted using the email or mailing address above.
Data Retention
We retain Customer Data, Administrator Data, Support Data, location data, and other Service data for as long as needed to:
- Provide the Services
- Meet legal, regulatory, and compliance obligations
- Resolve disputes
- Enforce agreements
- Maintain security and prevent fraud
When data is no longer required for these purposes, or when a valid deletion request is completed, we delete or anonymize the data in accordance with our retention practices and applicable law.
Data Location
Your Services' data may be transferred to, stored, and processed in the United States or any other country where RCO or its affiliates, subsidiaries, or service providers maintain facilities. By using the Services, you understand that your information may be transferred to and processed in these locations in accordance with this privacy statement and applicable law.
Children's Privacy
The Services are intended for business and organizational use and are not directed to children. We do not knowingly collect personal information from children for consumer use of the Services.
Changes to this Privacy Statement
We will occasionally update this privacy statement to reflect customer feedback and changes in our Services. When we post changes, we will revise the "last updated" date at the top of the statement. If there are material changes to this statement or in how RCO will use your information, we will notify you by posting a notice before the changes take effect, or by direct notification. We encourage you to periodically review this privacy statement.
How to Contact Us
RCO Services
2170 Georgina Avenue
Santa Monica, CA 90402
Office: 310-451-3735
Email: royn@rco.com