Privacy Policy

Welcome to Gasflow (“we”, “our”, or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our LPG business management platform: our website at gasflow.pk and our web application at app.gasflow.pk (together, the “Service”). Gasflow is software that helps LPG gas agencies, distributors and retailers in Pakistan manage sales, cylinders, customer credit (udhaar), cash and deliveries. By using the Service you agree to the practices described here.

2.1 Information You Provide

• Account information (name, email, phone number, business name)
• Business data (sales, inventory, customer information, financial records)
• Billing details: plan purchases are paid by bank transfer, so we store the payment reference and the proof of payment (such as a screenshot) you upload. We do not collect or store debit or credit card numbers
• Communications with our support team

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (features used, time spent, actions taken)
• Cookies and similar tracking technologies

If you sign in with Google, see Section 3: Google User Data for exactly what we receive from Google and how we use it.

Gasflow offers “Sign in with Google” as a convenient way to create and access your account. This section explains how we handle the information Google shares with us.

3.1 What we access

When you choose Google sign-in, we request only the basic profile scopes openid, email and profile. Google then shares your name, email address and profile picture with us. We do not request or access your Gmail, Google Drive, Google Calendar, Google Contacts or any other Google service or data.

3.2 How we use it

• To create your Gasflow account and sign you in
• To show your name and picture inside the app, and to email you about your account (for example invoices and security notices) at your Google email address
• To recognise you when you return, so you do not need to manage a separate password

3.3 What we never do

• We do not sell your Google user data, and we do not share it with advertisers or data brokers
• We do not use it for advertising, including personalised or retargeted ads
• We do not transfer it to third parties, except to the service providers listed in Section 6 that host and operate Gasflow on our behalf, or where the law requires it
• We do not use it to train artificial intelligence or machine learning models
• No person at Gasflow reads your Google profile information except as needed to provide support you ask for, for security, or to meet legal obligations

3.4 Storage, retention and deletion

Your Google name, email and picture are stored in our database alongside your account, protected as described in Section 5, and kept for as long as your account exists. You can stop using Google sign-in at any time by revoking Gasflow’s access in your Google Account permissions. To have your account and the Google data we hold deleted, email [email protected] from your registered address. We delete it within 30 days, except where we must keep certain records for legal or tax reasons (Section 7).

Gasflow’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use your information to:

• Provide, maintain, and improve our services
• Authenticate you and create your account, including via Google Sign-In
• Process your transactions and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

We implement industry-standard security measures to protect your data:

• Bank-grade encryption (SSL/TLS) for data transmission
• Encrypted data storage on secure cloud servers
• Regular security audits and updates
• Automated backups to prevent data loss
• Access controls and authentication mechanisms

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We do not sell your personal information, and we do not use it for advertising. We share data only with the following, and only as needed:

Your business records belong to you. We process them only to run the Service for you, and they are kept separate from other customers’ data. Our service providers may process data on servers outside Pakistan.

We retain your information for as long as your account is active or as needed to provide services. After account termination, we may retain certain information for legal, regulatory, or legitimate business purposes for up to 7 years, as required by Pakistani tax and business regulations.

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal obligations)
• Export your business data in a portable format
• Opt-out of marketing communications
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]

Deleting your account and data: Email [email protected] from your registered address and request account deletion. We will delete your account, your business records, and any data obtained through Google Sign-In (name, email, profile picture) within 30 days, except where we are required to retain certain records for legal, tax, or regulatory purposes as described in Section 7.

We use a small number of cookies. Essential cookies keep you signed in and protect your session, and they are required for the app to work. On our website we also use Google Analytics to understand which pages are visited, so we can improve them. You can control cookies through your browser settings, but disabling essential cookies will stop sign-in from working.

Children. Gasflow is a business tool and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

Changes. We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page and, for material changes, notify account holders by email or inside the app.

If you have questions about this Privacy Policy or our data practices, please contact us: