Privacy Policy

FuelAnchor, Inc. ("FuelAnchor," "we," "our," or "us") operates the website at fuelanchor.com and provides fuel price cap services to commercial fleet operators. This Privacy Policy describes how we collect, use, store, and protect information about you when you use our services.

By creating an account or using our services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

We collect information you provide directly and information generated through your use of our services:

• Account information: First name, last name, and business email address when you create an account.
• Fuel usage data: Estimated monthly fuel consumption (gallons), fuel type (diesel or gasoline), state of operations, and desired contract length that you provide when requesting a price cap quote.
• Authentication data: Hashed passwords (never stored in plaintext), email verification status, and timestamps of account creation and last login.
• OAuth data: If you sign in with Google, we receive your Google account ID, name, and email address from Google's authentication servers. We do not receive your Google password.
• Communications: Any messages you send to our support email or through contact forms.
• Usage data: Log data including IP addresses, browser type, pages visited, and timestamps, collected automatically when you access our site.

We use your information solely to operate and improve our services:

• To create and manage your account and authenticate your identity.
• To generate personalized fuel price cap quotes based on your usage data.
• To communicate with you about your account, quotes, contracts, and service updates.
• To send transactional emails (account verification, quote confirmations, contract notices) via Resend.
• To monitor and improve the security, reliability, and performance of our services.
• To comply with legal obligations.

We do not use your data for advertising, profiling for third-party purposes, or automated decision-making that produces legal effects.

FuelAnchor offers sign-in via Google OAuth 2.0 as a convenience. When you choose "Continue with Google," you are redirected to Google's authentication servers. We receive a limited set of profile data (name, email, Google account ID) after you grant consent on Google's interface.

Your use of Google sign-in is also subject to Google's Privacy Policy. FuelAnchor does not have access to your Google password, Google Drive, Gmail, or any other Google services.

You may disconnect Google sign-in at any time by contacting us at hello@fuelanchor.com or by visiting your Google account's connected apps settings.

Your data is stored in Amazon Web Services (AWS) infrastructure located in the United States (us-east-2 region). Specifically:

• Amazon DynamoDB: Account data, authentication records, and quote data are stored in DynamoDB tables operated by FuelAnchor. Data is encrypted at rest using AWS-managed keys and encrypted in transit via TLS.
• AWS Amplify: Our web application is hosted on AWS Amplify. Application logs may be retained for up to 30 days.

We implement industry-standard technical and organizational security measures including HTTPS-only access, HTTP-only session cookies, and hashed password storage. No security measure is perfect; if you believe your account has been compromised, contact us immediately.

We use Resend (resend.com) to deliver transactional emails on our behalf, including account verification emails, quote summaries, and contract notices. Resend receives your email address and the content of emails sent to you. Resend's privacy policy governs their handling of this data.

We do not send marketing emails without your explicit consent. Transactional emails are necessary for operating the service and cannot be opted out of while your account is active.

We do not sell your personal information. We do not share your personal data with third parties for their marketing or advertising purposes.

We share data only in the following limited circumstances:

• Service providers: AWS, Resend, and other infrastructure vendors who process data on our behalf under data processing agreements and are contractually prohibited from using your data for any other purpose.
• Legal requirements: If required by law, court order, or government authority, or to protect the rights, property, or safety of FuelAnchor, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of FuelAnchor's assets, your data may be transferred to the successor entity, subject to the same protections described in this policy.

We retain your account data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, tax, or regulatory purposes.

Quote data and contract records may be retained for up to 7 years for accounting and legal compliance purposes.

You have the following rights with respect to your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your account and personal data, subject to legal retention obligations.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, contact us at hello@fuelanchor.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

Our services are intended for business use by adults and are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and update the "Last updated" date at the top of this page. Continued use of our services after changes take effect constitutes your acceptance of the revised policy.