Privacy Policy

FuelLedger is operated by GOFTECH Solutions, F-2, Second Floor, Near Mini Minor, Housing Society, Sector C, PWD, Islamabad. For anything on this page, write to info@goftechsolutions.com or call +92 335 5265622.

Three kinds of data, and nothing else:

• Account data — your business name, owner name, email address, phone number and city, plus a password that is stored only as a bcrypt hash. We never hold your password itself and cannot read it.
• Business data — everything your branches record: shifts, meter readings, cash entries, expenses, credit (udhaar) customers and their balances, suppliers, stock, staff records, and the reports derived from them.
• Operational logs — an audit trail of who changed what and when, including the IP address and browser or device the change came from, and a log of every email we send you. These exist so a disputed figure can be traced to a person.

No payment details. There is no payment gateway in FuelLedger. The one-time fee is paid offline by bank transfer or cash, so no card number, CVV or bank credential ever reaches this system. We record only that a payment was confirmed, its amount, method and your reference.

We do not collect location data, contacts, photos, or anything from your device beyond what you type into the app.

Every record carries the identifier of the business it belongs to, and every query is filtered by it — one business can never read another one’s books. Inside your business, a manager sees only the screens you have granted them; a new manager holds nothing until you tick the boxes.

Our platform operators can access your account for support and to confirm your activation payment. That access is logged in the same audit trail you can read.

We do not sell, rent or share your data with anyone — no advertisers, no data brokers, no analytics resellers.

Only what is needed to run the service: our hosting provider, which stores the database, and our email provider, which delivers your verification codes, password resets, invitations and alerts. Neither uses your data for their own purposes.

Passwords are hashed with bcrypt. Sessions are signed tokens that expire after seven days. Sign-in and registration are rate-limited against guessing, and one-time codes are burned after a small number of wrong attempts. One-time codes are never written into our message logs in readable form.

No system is perfect. If you believe an account has been compromised, change the password and tell us immediately.

Your data is yours and is exportable at any time, by you, without asking us: Settings → Data Export produces a CSV of every table your business owns, carrying your own business profile. There is deliberately no import — writing books back across their relationships is how a restore corrupts live accounts.

You can ask us to delete your account and your business data at any time from the account deletion page. Export anything you want to keep first — deletion is not reversible.

For as long as your account is active. If you ask for deletion we remove your business data; we keep the minimum record of the activation payment that our own bookkeeping requires, which contains no operational data about your pump.

FuelLedger is business software and is not directed at anyone under 18. We do not knowingly create accounts for children.

If this policy changes materially we will email the address on your business account. The date at the top always reflects the current version.