← Back
Privacy Policy
1. Information We Collect
We collect the following information:
- Station ZIP code and station operating details you submit, such as fuel type, store features, tanks, pumps, car wash, food service, tobacco, alcohol, lottery, and ATM availability
- Station name, address, city, county, and state when provided or inferred from ZIP code
- Email address for purchase receipt, magic-link sign-in, report access, support, and unsupported-area availability notification
- Stripe checkout session ID, Stripe customer ID, purchase amount, payment status, and entitlement status; we do not see or store your card number
- Generated permit information report data, including permit categories identified, cost ranges, penalty context, renewal timing, and PDF/report access records
- Optional phone number and WhatsApp metadata only if you separately opt in to WhatsApp reminders
- Usage data and logs needed to operate, secure, and troubleshoot the Service
2. How We Use Information
We use collected information to:
- Provide and improve the Service
- Communicate with you about your account or inquiries
- Process payments (via Stripe — we never see your card number)
- Send service-related notifications you've requested
3. Data Sharing
We do NOT sell your personal information. We share data only with:
- Stripe for payment processing and purchase verification
- Hosting provider for operating the web application and storing submitted station/report data
- Email provider for magic-link sign-in, support, receipts, and availability notifications
- Twilio and Meta/WhatsApp only if you separately opt in to WhatsApp reminders
- Twilio Inc. (future optional WhatsApp reminders only). If and when WhatsApp reminders become available, and you separately opt in, your mobile phone number and message content may be transmitted to Twilio Inc. solely to deliver those reminders on our behalf. Twilio's data processing terms are available at https://www.twilio.com/en-us/legal/data-protection-addendum.
- Meta Platforms, Inc. (future optional WhatsApp reminders only). If and when WhatsApp reminders become available, and you separately opt in, messages may be delivered through the WhatsApp Business API operated by Meta Platforms, Inc. Message metadata may be processed by Meta as part of platform operation. Meta's privacy policy is available at https://www.whatsapp.com/legal/privacy-policy and Meta's data processing terms are available at https://www.whatsapp.com/legal/business-data-processing-terms.
- We do not sell, rent, or trade your phone number or personal information to third parties for their marketing purposes.
4. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion at any time by contacting support@gaspermit.com.
5. Security
We implement reasonable security measures including encryption in transit (TLS), access controls, and secure data storage. However, no method of electronic transmission or storage is 100% secure.
6. Cookies & Tracking
We use one strictly necessary session cookie to keep you signed in to the GasPermit web dashboard. Details:
- Name:
gp_session
- Purpose: Maintains your authenticated session after you sign in via magic link.
- Duration: 24 hours from sign-in, or until you sign out.
- Type: Strictly necessary, first-party, HttpOnly, Secure (on HTTPS). Not accessible to JavaScript. Not used for tracking or advertising.
We do not use advertising trackers, analytics cookies, or third-party tracking pixels. We do not sell browsing data.
7. Third-Party Services
The Service uses third-party tools for payment processing (Stripe) and hosting. These services have their own privacy policies.
8. Your Rights
You have the right to:
- Access — request a copy of your data
- Correction — request correction of inaccurate data
- Deletion — request deletion of your data
- Opt-out — unsubscribe from communications
9. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect information from children.
10. Contact for Privacy
For privacy questions or requests: support@gaspermit.com
11. Breach Notification
In the event of a data breach, we will notify affected users via email within 72 hours of discovery, as required by applicable law.
12. Changes
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service.
13. International Data Transfers
GasPermit is operated from the United States. If and when WhatsApp reminders become available, and you separately opt in, your phone number and message metadata may be processed by Meta Platforms, Inc., which operates globally and may transfer and process your data in countries outside the United States, including countries in the European Union and the Asia-Pacific region. Meta represents that it complies with applicable legal frameworks governing international data transfers, including standard contractual clauses where required.
14. Future WhatsApp Reminders
WhatsApp reminders are not part of the current paid report purchase. If and when they become available, GasPermit will ask for separate express consent before sending automated WhatsApp messages. Consent to WhatsApp reminders will not be required to purchase a permit information report.
15. Phone Number Deletion
If you separately opt in to future WhatsApp reminders, you may request deletion of your phone number and associated WhatsApp messaging records at any time by contacting us at support@gaspermit.com. We will honor deletion requests within 30 days of receipt. Meta and Twilio may retain message metadata in accordance with their own retention policies; GasPermit has no control over third-party retention.
16. Login Activity
When you sign in to the GasPermit web dashboard, we record the date and time of your most recent successful login. This timestamp is stored in your account record and visible on your profile page. We use it to maintain account security and identify inactive accounts. We do not log your IP address or device information at sign-in.
Last updated: April 28, 2026 · Terms of Service · Disclaimer