Petro on the Go, Inc.

Privacy Policy

Effective date: November 2, 2026

This Privacy Policy is Part II of our Customer Agreement and explains how Petro on the Go, Inc. collects, uses, and shares personal information through its website, app, and delivery operations. Part I is our Terms of Service. Text-message data is also described in the Privacy Notice for the Text Messaging Program at the end of this page.

Part II — Privacy Policy

1. Information We Collect

  1. 1.1Information you give us: name, delivery address, phone number, email address, vehicle details, fuel grade, delivery instructions, communications with us, and, through our payment processor, payment information.
  2. 1.2Location. When you place an order, you mark where your vehicle is parked by placing a pin on a map. If you allow location permission, the app uses your device's precise location while the app is open to set your delivery spot and to show your driver on the way. If you turn on the Recommendation Engine in our iOS app, we also collect the places where you stop, as described in Section 11.
  3. 1.3Information collected automatically: device and browser data, IP address, app usage, and cookies or similar technologies, as described in Cookies and Tracking.
  4. 1.4Information about other people: the name and contact details an Account Owner enters to add an Authorized User, used only to send the invitation and set up that person's access. If the Account Owner chooses a text invitation, we use the phone number to send one invitation text and at most one reminder.
  5. 1.5Information from others: payment processor confirmations and address-validation results.
  6. 1.6Stops. Only if you turn on the Recommendation Engine, the location and time of places where you stop for 10 minutes or more. Precise location is sensitive data under Texas law, and we collect your stops only with your consent. See Section 11.

2. How We Use Information

  1. 2.1To create and manage accounts; take, deliver, and bill orders; locate your vehicle; send order and account notices; provide the delivery record; provide support; keep the service safe and secure; prevent fraud and misuse; keep required records; comply with law; and improve the service.
  2. 2.2We use phone numbers to communicate with you about your orders, including logistics, delivery, and any problems. We do not use text-message numbers for advertising.
  3. 2.3If you turn on the Recommendation Engine, we use your stops as described in Section 11.

3. How We Share Information

  1. 3.1We share information with service providers that act on our behalf (for example, payment processing through Stripe, SMS delivery through Twilio, sign-in verification and push notifications through Google Firebase, hosting and security, and mapping and routing through Google Maps and Apple Maps); with Authorized Users on an account as the Account Owner permits; when required by law or to protect safety, rights, or property; and in a merger or sale of the business. Our cloud hosting provider, Microsoft Azure, stores our data, including your stops, on our behalf.
  2. 3.2We do not sell personal information. We do not sell precise location data. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not share text messaging opt-in data or consent records with any third parties.

4. Payment Information

  1. 4.1Our payment processor, Stripe, collects and processes card data. We receive a token and limited details (such as card type and last four digits) and do not store full card numbers.

5. Retention

  1. 5.1We keep personal information only as long as needed for the purposes above and to meet legal, tax, and dispute-resolution needs.
    • Account profile: while the account is open and 12 months after it is closed.
    • Order and delivery records (date, address, grade, gallons, price, receipt): 4 years.
    • Text consent and opt-out records: 4 years. Message delivery logs (which message, when, to which number) and message content: 1 year.
    • Opt-out list: kept for as long as we operate, so we do not text someone who has opted out.
    • Vehicle location data: deleted 90 days after the delivery is completed, unless tied to an open claim or incident.
    • Recommendation Engine stops: deleted automatically 180 days after they are recorded. If you delete your location history (including when you turn off the Recommendation Engine) or delete your account, we remove your saved stops from our active systems right away. Copies in backups may remain for up to 35 more days before they are overwritten.
    • Payment tokens and last four digits: with the related order record.
    • Claim, incident, and spill records: until the matter is resolved plus 4 years; longer if the law requires.
    • Customer support communications: 2 years.
    • Any record subject to a legal hold: until the hold is lifted.

6. Security and Breach Notification

  1. 6.1We use reasonable administrative, technical, and physical safeguards to protect personal information.
  2. 6.2If a breach of system security involves sensitive personal information, we will notify affected individuals without unreasonable delay and no later than 60 days after we determine the breach occurred, and will notify the Texas Attorney General as soon as practicable and no later than 30 days after that determination if the breach involves at least 250 Texas residents.

7. Your Choices and Rights

  1. 7.1You can update account information in the app, turn off location permission in your device settings, opt out of text messages by replying STOP, and ask us to delete your account, subject to the record-keeping periods above.
  2. 7.2You can turn off the Recommendation Engine, delete your location history, or delete your account at any time, as described in Section 11.

8. Children

  1. 8.1Our services are not directed to children under 13, and we do not knowingly collect their personal information. If we learn we have, we will delete it. Account Owners and Authorized Users must be at least 18 years old.

9. Cookies and Tracking

  1. 9.1Our website does not use advertising or analytics cookies. We use Vercel Web Analytics, a cookieless tool, to count page visits and see which pages and links bring people to the site; it does not identify you personally or track you across other websites. Our Pricing page loads map images from OpenStreetMap, which receives your IP address and browser information when the map is displayed.
  2. 9.2Our app uses essential storage on your device to keep you signed in and to run the app. It does not use advertising trackers or third-party analytics tools, and we do not send phone numbers, text-consent records, or payment information to any analytics tool.
  3. 9.3You can clear or block cookies in your browser settings. Blocking essential storage may stop the app from working.

10. Changes; Contact

  1. 10.1We may update this Policy and will post the new effective date; for material changes we will notify you as described in the Terms.
  2. 10.2Contact: Petro on the Go, Inc., support@petroonthego.com.

11. Location Data and the Recommendation Engine

  1. 11.1While the app is open. If you allow location permission, the app uses your device's precise location while the app is open to set your delivery spot and to show your driver on the way.
  2. 11.2The Recommendation Engine is optional. The Recommendation Engine is a feature of our iOS app. It is off by default, and you do not need it to place an order. If you turn it on and allow "Always" location access in iOS, the app uses your location in the background to note places where you stop for 10 minutes or more. It does not record a continuous trail of your movements.
  3. 11.3Recommendations roll out in stages. Until recommendations are available to you, the app only collects your stops so we can build and test the feature. When recommendations begin, we will tell you in the app how they work. We will ask you again before using your stops in a way that is materially different from what this Section describes.
  4. 11.4What we collect and where it goes. Your iPhone detects when you stop somewhere for 10 minutes or more. When it does, the app sends that stop (its location and the time) to our servers. If your phone is offline, the app holds stops on your phone until it can send them, keeping at most 1,000 and dropping any older than 180 days; these waiting stops are cleared when you sign out or turn off the Recommendation Engine. Our servers save each stop, whether it is inside or outside our service areas. Saved stops are kept for up to 180 days.
  5. 11.5How we use your stops. If you turn on the Recommendation Engine, we use your stops to:
    • recommend delivery times to you, based on your own routine;
    • find patterns across customers who have opted in (where and when people tend to stop), so we can train and improve our recommendation system and send similar recommendations to groups of customers in the same area;
    • plan our truck schedules and capacity, so that deliveries are spread out instead of arriving all at once;
    • decide where to expand our service areas, based on where customers who have opted in tend to stop; and
    • develop, test, and improve the Recommendation Engine.
    Your stops are saved with your account, so we can show you your history, let you delete it, and personalize recommendations for you. We do not sell your stops, and we do not use them for advertising by other businesses.
  6. 11.6Stops can reveal sensitive information. A stop can reveal things about you, such as a visit to a medical office, a clinic, a pharmacy, a counselor, a place of worship, or where you spend time at certain hours. This applies to stops anywhere, not just inside our service areas. If you do not want a stop recorded, turn off the Recommendation Engine before you go, or delete your history afterward.
  7. 11.7Who can see your stops. We do not show your individual stops to drivers or other customers. A small number of Petro employees and developers with administrative access can see stored stops, for building and testing the feature, providing support, keeping the system secure, and complying with the law.
  8. 11.8Sharing. We never sell this location data, and we do not share it with any other person or business for their own use. Our cloud hosting provider, Microsoft Azure, stores it for us and may handle it only on our instructions. We may disclose it if the law requires, such as in response to a subpoena or court order, or to protect safety, as described in Section 3. If our business is sold or merged, stops may transfer to the new owner under this Policy.
  9. 11.9How long we keep stops, and deleting them. We automatically delete each saved stop 180 days after it is recorded. If you delete your location history (when you turn off the Recommendation Engine, or at any time with "Delete my location history") or delete your account, we remove your saved stops from our active systems right away. Copies in our backups may remain for up to 35 more days before they are overwritten.
  10. 11.10Your controls. You can turn the Recommendation Engine off at any time in the app under Profile → Recommendation Engine. This stops collection, and you can choose to delete your saved stops at the same time. If you keep them, they are still deleted automatically after 180 days. You can also tap "Delete my location history" at any time, or delete your account, which also deletes your saved stops. You can turn off location access for the app in iOS Settings, and if you do we stop collecting stops. Turning the feature off does not affect your ability to order. If our recommendation system has already learned patterns from your stops, those patterns may remain in the system in a form that does not identify you.
  11. 11.11Notifications. Recommendations will appear in the app, and we may also send them as push notifications. You can turn off push notifications at any time in iOS Settings. We will not send recommendations by text message. A notification will not show where you have stopped.
  12. 11.12Your consent. Precise location is sensitive data under Texas law. We collect your stops only if you turn on the Recommendation Engine, and you may withdraw your consent at any time as described above.

Text Messaging Program — Part B: Privacy Notice

Effective date: October 6, 2026

This Notice is Part B of our Text Messaging Program Terms and Privacy Notice and supplements the Privacy Policy above. Part A is our Text Messaging Terms.

1. Information We Collect

  1. The mobile number you provide, or that an Account Owner provides to invite you as an Authorized User.
  2. Consent and opt-out records, including the date and time, the version of the notice shown, and the method used.
  3. The content of messages we send and delivery logs.

2. How We Use This Information

  1. Phone numbers collected through our application are used exclusively for transactional account and order notifications to customers about transactions they have requested.
  2. We do not use phone numbers to advertise or market.

3. Sharing

  1. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We may share other information about you and your orders, such as delivery details, with service providers that help us operate (for example, payment processing, hosting and security, and mapping and routing), with your account's authorized users as the account owner permits, when the law requires it, to protect safety or rights, and in a merger or sale of the business.
  2. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
  3. We use service providers, such as our SMS platform, only to deliver messages on our behalf.

4. Retention

  1. We keep consent and opt-out records for at least four (4) years. We keep message logs for one (1) year.

5. Security and Breach Notification

  1. We use reasonable safeguards to protect this information.
  2. If a breach of system security involves sensitive personal information, we will notify affected individuals without unreasonable delay and no later than sixty (60) days after we determine that the breach occurred. If the breach involves at least 250 Texas residents, we will also notify the Texas Attorney General as soon as practicable and no later than thirty (30) days after that determination.

6. Contact Us

  1. Petro on the Go, Inc., support@petroonthego.com.

7. Changes to This Notice

  1. We may update this Notice and will post the new effective date. We will tell enrolled customers before a material change takes effect.