This policy explains how VTOXI ("we", "us") handles information when you use FuelXpress at https://fuelxpress.pk, the web app at https://app.fuelxpress.pk and our Android app (together, the "Service").
Information we collect
- Account details: your name, email address, phone number, username and company name, and a securely hashed password.
- Business data you enter: stations, pumps, tanks, fuel sales, closures, expenses, customers and credit records, and your team members. You control this data.
- Billing details: your plan, invoices and payment status. Card details are handled by our payment provider and are not stored by us.
- Technical data: sign-in sessions, device and browser type, IP address and error logs, used to keep the Service secure and working.
- Crash reports: if the Android app crashes, it sends a technical report (device model, Android version, app version and the error) and your company's internal id to Firebase Crashlytics (Google) so we can fix the problem. It contains no names, emails or business figures.
- Activity history: we keep an audit log of who created, changed or deleted important records (prices, users and permissions, billing, stock and closures) and when, so your company can see what happened. Passwords and secrets are never written to it.
Our marketing website does not use advertising cookies.
Analytics
To understand how the Service is used and to fix problems, the app and our servers record anonymous usage events: which pages and features are used, an anonymous account and company identifier (a one-way hash, never your real ID), your plan and app version, and the type of device. We never include names, email addresses, phone numbers, customers or financial figures. We send these events to analytics providers that process them for us (Google Analytics and PostHog). You can switch this off at any time in the app under Settings > Privacy > Share anonymous usage data.
On this website, Google Analytics only runs if you click Accept on the cookie notice.
How we use it
- To provide, secure and improve the Service and to support you.
- To manage your trial, subscription and payments.
- To send service messages such as sign-in, billing and security notices.
- To meet legal obligations and prevent misuse.
We do not sell your personal data.
Sharing
We share information only with service providers that help us run the Service (for example hosting, email delivery, crash reporting and push notifications from Google Firebase, and payment processing by our payment partners), who may use it only for that purpose, and when the law requires it. Within your company, your team members see what their role allows.
Security
We use encrypted connections, hashed passwords, role-based access, optional two-factor authentication and regular backups. No system is perfectly secure, so please use a strong password and keep it private.
Retention
We keep your data while your account is active. When you delete your account in the app, your name and email are removed and you are signed out everywhere immediately. If you also delete your company, its business data is hidden from everyone straight away and permanently erased within 30 days. We may keep invoices and payment records for as long as tax, accounting or fraud-prevention rules require, and the audit log keeps only an internal id that no longer links to a name or email. Backups are overwritten on our normal schedule.
Your choices and rights
You can access, correct, export or delete your information. Company administrators can download all of the company's data as a ZIP of CSV files, and anyone can delete their own account, from Account security > Your data in the app. See Delete your account for the steps. For any other request, email support@fuelxpress.pk.
Children
The Service is for businesses and is not directed at children under 18.
Changes
We may update this policy. We will change the date above and, for material changes, notify you in the app or by email.
Contact
VTOXI, G-15/4, Islamabad, Pakistan
Email: support@fuelxpress.pk · Phone: +92 335 3232352