FuelIQHub
Security

What we do with your register, and what we never do.

Written by the technician who fits the box, in plain words. If something here is ever not true, it is a bug and we fix it.

At your store

It reads. It does not write.

The box asks the Commander only for reports, the transaction log, tank levels and the setup copy. A fixed list of read commands is allowed; everything else is refused before it leaves the box. Prices, items, taxes, users and security settings are never changed.

The one exception, written down

The Commander forces its login password to change every 30 days. The box can change its own password, and nothing else. Every such change is logged by name, never by value.

Nothing comes in

The box only makes outgoing, encrypted connections to FuelIQHub. No port is opened on your router, and nothing on the internet can reach into your store through it.

Each store has its own key

Every box sends with a key that belongs to that one station. If a box is ever lost, that key is replaced and the old one stops working at once.

Your data

No card numbers, ever

For a chargeback we keep the card brand, the last four digits, the approval code and the reference number. Full card numbers, expiry dates and track data are never read, and anything that looks like a card number is refused when it arrives.

Register passwords blanked

The nightly copy of your register's setup has every password, PIN and key blanked before it is stored. The register's security settings are never read at all.

Encrypted on the way

Everything travels over HTTPS with modern TLS, and browsers are told to use nothing else.

Kept, then cleared

Daily reports and transactions are kept for 400 days, logs for 180. The database is backed up every night and each backup is checked before it is kept.

Yours to take

Download any day, month or range as PDF, Excel or CSV whenever you like, and a QuickBooks file of the books. We never sell or share your numbers.

Shared only when you say

Nothing is emailed or sent anywhere until you turn it on. A fuel supplier sees fuel and tanks only, for the stations you choose, and loses access the moment you take it away.

Signing in

A login for each person

Owner, manager, staff, bookkeeper, fuel supplier, management company: each sees only their stations and only what their role allows. Every change and every download is written to an audit log the owner can read.

Two-step sign-in

Turn on a code from an authenticator app, with one-time recovery codes. Passwords are stored as bcrypt hashes, repeated wrong passwords are slowed down, and reset links work once, for 30 minutes.

Time clock PINs

Clerk PINs are stored as keyed hashes, and too many wrong PINs in a minute lock the pad for that store.

Payments and outside services

Your subscription is paid through Paysafe

You type your card into Paysafe's secure payment form, which Paysafe serves itself. FuelIQHub gets back only a token and the last four digits, so the card data that PCI rules cover never reaches our servers.

Ask your store

Quick answers are worked out on our own server. Typed questions use Anthropic's Claude only after the owner switches them on; the question and the figures needed to answer it are sent, approval codes and card details never are.

Nearby pump prices

If you add it, your station's address is used to look up nearby prices on Google. Nothing else about your store is sent.

What we do not claim: FuelIQHub is not a payment processor and does not hold a SOC 2 or PCI certificate. We keep card data out of our systems instead. Questions about any of this are answered by the person who built it; use the install form and ask.