Privacy policy

Last updated September 23, 2026

PumpOps is software for fuel retailers: it recommends prices for their stations and keeps their compliance inspections, records and documents. This policy covers the PumpOps website at pump-ops.app, the PumpOps web app, and the PumpOps Site Manager mobile app for iOS and Android (together, the “Service”).

Most people who use PumpOps do so through an account set up by their employer (the “Organization”). For the data an Organization puts into PumpOps, the Organization decides what is collected and why, and PumpOps processes it on the Organization’s behalf. If your Organization has a signed agreement with us, that agreement controls where it differs from this policy.

What we collect

Account information

• Your name, email address and the role your Organization gives you.
• If you sign in with Google, the basic profile Google shares with us: your name, email address and profile picture. We ask Google for nothing else, and we never see your Google password.
• Your password, if you set one, is held by our sign-in provider (Clerk) and is never stored by PumpOps.

Inspections and site records (mobile app)

• Location. When you file an inspection, the app records the device’s location at that moment, so your Organization can see the record was made at the site. Location is read only while you are filing and the app is open. It is never tracked in the background.
• Photos. If you mark an item as non-compliant, you can take a photo with the camera or pick one from your photo library. Only the photos you choose are uploaded.
• The answers, notes and times you enter on inspections, and the records and documents generated from them.

Business data

Station details (addresses and coordinates), fuel prices, competitor prices, and pricing decisions that your Organization enters or that PumpOps produces for it.

Contact form

If you fill in the contact form on our website, we receive your name, email address, company, number of sites and your message, and use them only to reply to you.

Technical data

Our servers keep standard logs (IP address, device and browser type, the times of requests, and errors) to run and secure the Service. The website stores your light/dark theme choice in your browser. We don’t use advertising or cross-site tracking cookies.

How we use it

• To provide the Service: sign you in, show your Organization its sites, prices, inspections and documents, and send the emails the Service needs (such as invitations and notifications).
• To keep the Service secure, prevent abuse, and fix problems.
• To reply when you contact us.

We don’t sell personal information, share it for advertising, or use it to build advertising profiles. Data received from Google is used only to sign you in and is handled according to the Google API Services User Data Policy, including its Limited Use requirements.

Who processes it for us

We use a small number of service providers, each only for the job listed:

• Amazon Web Services: hosting, database and file storage (including inspection photos), in the United States.
• Clerk: sign-in and account management.
• Google: “Sign in with Google”, if you choose it.
• Resend: sending email.
• Vercel: hosting this website.

Within an Organization, what you enter is visible to the people your Organization gives access to, according to their roles. We may also disclose information if the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

How long we keep it

We keep an Organization’s data for as long as its account is active. Compliance records are often kept for years because regulators require it, and the Organization controls that. When an Organization closes its account, we delete its data within 90 days, except what we must keep by law. Server logs are kept for up to 90 days. Contact form messages are kept for as long as needed to follow up on them.

Security

Data is encrypted in transit (HTTPS) and at rest. Each Organization’s data is isolated at the database level, and access inside PumpOps is limited to people who need it to run the Service. No system is perfectly secure, and we will notify affected Organizations of a breach as the law requires.

Your choices and rights

• You can turn off location, camera or photo access for the app in your phone’s settings at any time. Inspections filed without location access won’t record where they were filed, and some steps, such as attaching a photo to a non-compliant item, need camera or photo access.
• To see, correct, export or delete your personal information, ask your Organization’s PumpOps administrator, or email us at leads@pump-ops.app and we’ll handle it or pass it to your Organization. Depending on where you live (for example, California or the EU/UK), you may have further rights under law, and we will honor them.
• Deleting your account: email leads@pump-ops.app from the address on the account, or ask your administrator to remove you. We delete your account within 30 days. Inspection records you filed stay with your Organization, since they are its compliance records, but are no longer tied to an active login.
• You can revoke PumpOps’ access to your Google account at any time at myaccount.google.com/permissions.

Children

PumpOps is a workplace tool for adults. It is not directed at children under 16, and we do not knowingly collect their information.

Changes

If we change this policy, we’ll update the date at the top. If the change is significant, we’ll also tell account holders by email or in the app before it takes effect.

Contact

Questions about privacy: leads@pump-ops.app.