What we collect
Two categories, and they are worth keeping apart because they are governed differently.
Account data
- The email address you sign up with, and the name you give yourself and your organisation.
- The outlets, tanks, nozzles and fuel types you configure.
- The people you invite, their email addresses, and the role you grant each of them on each outlet.
- Subscription state — which plan you are on, when the trial ends, and the identifiers our payment provider returns.
Operational data
- Meter readings, tank dip readings, tanker deliveries, shifts, payments, expenses and everything else you or your staff enter about running the outlet.
Operational data is yours. We process it to run the product for you and for no other purpose — it is not analysed across customers, not used to train anything, and not sold or shared for advertising.
Payment details
We never see your card. Payments are processed by Razorpay, which collects card, UPI and netbanking details directly in its own hosted checkout. PumpDesk receives only the identifiers Razorpay returns — a subscription id, a payment id, and the status of each — which is what we store against your organisation to know whether your plan is active.
Razorpay is a separate controller of the payment data it collects and its own privacy terms apply to it.
Where it is stored
Application data is stored in a managed PostgreSQL database operated by Supabase, hosted in the Asia-Pacific (Tokyo) region. This means your data is processed outside India. By using PumpDesk you consent to that transfer.
The application itself is served by Vercel from its global edge network. All traffic is HTTPS only, with HSTS and a strict Content-Security-Policy set on every response.
Who else processes it
The complete list. Each one is here because the product cannot run without it, and none of them is an advertising or data-broking service.
| Processor | What for | What it sees |
|---|---|---|
| Supabase | Database and authentication | All account and operational data |
| Vercel | Hosting and delivery | Request metadata; aggregate page analytics |
| Razorpay | Payments and subscriptions | Payment details and billing contact |
There are no advertising trackers, no third-party analytics beyond Vercel’s own aggregate page counts, no session recording, and no social media pixels. The free calculators run entirely in your browser — the figures you type into them are never sent anywhere.
Cookies
PumpDesk sets cookies for one purpose: keeping you signed in. These are the session cookies issued by Supabase Auth, and without them the application cannot tell who you are between requests. There are no advertising or cross-site tracking cookies, which is why there is no consent banner — there is nothing to consent to beyond the session itself.
The site also registers a service worker so the app can be installed to a home screen. It caches application assets in your own browser and does not transmit anything.
How long we keep it
- While your account is active — operational data is kept so your reports can reach back over the history your plan carries.
- If your subscription lapses — the account pauses rather than being deleted, and your data stays exportable. Nothing about a billing state deletes history.
- On deletion request — account and operational data are removed. Records we are required to retain for tax or statutory purposes, principally payment records, are kept for the period the law requires.
Your rights
You can access, correct, export and delete your data. Access, correction and export need no request at all — every report in PumpDesk exports to Excel and PDF over any date range you choose, which is deliberate: your own history should never be behind a support ticket.
For deletion, or any question about this policy, raise it from Support inside the app, or get in touch.
Security
- HTTPS only, with HSTS including subdomains.
- A strict enforcing Content-Security-Policy, with framing denied outright.
- Every authorisation decision made on the server against the role you hold on that specific outlet — never in the browser.
- Passwords handled by Supabase Auth; we never store or see them.
No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability, please report it through Support rather than disclosing it publicly.
Children
PumpDesk is business software and is not directed at children. We do not knowingly collect data from anyone under 18.
Changes to this policy
If this policy changes materially — a new processor, a different storage region, a new category of data — the date at the top changes and account owners are notified inside the app.