What we do with your register, and what we never do.
Written by the technician who fits the box, in plain words. If something here is ever not true, it is a bug and we fix it.
At your store
It reads. It does not write.
The box asks the Commander only for reports, the transaction log, tank levels and the setup copy. A fixed list of read commands is allowed; everything else is refused before it leaves the box. Prices, items, taxes, users and security settings are never changed.
The one exception, written down
The Commander forces its login password to change every 30 days. The box can change its own password, and nothing else. Every such change is logged by name, never by value.
Nothing comes in
The box only makes outgoing, encrypted connections to FuelIQHub. No port is opened on your router, and nothing on the internet can reach into your store through it.
Each store has its own key
Every box sends with a key that belongs to that one station. If a box is ever lost, that key is replaced and the old one stops working at once.
Your data
No card numbers, ever
For a chargeback we keep the card brand, the last four digits, the approval code and the reference number. Full card numbers, expiry dates and track data are never read, and anything that looks like a card number is refused when it arrives.
Register passwords blanked
The nightly copy of your register's setup has every password, PIN and key blanked before it is stored. The register's security settings are never read at all.
Encrypted on the way
Everything travels over HTTPS with modern TLS, and browsers are told to use nothing else.
Kept, then cleared
Daily reports and transactions are kept for 400 days, logs for 180. The database is backed up every night and each backup is checked before it is kept.
Yours to take
Download any day, month or range as PDF, Excel or CSV whenever you like, and a QuickBooks file of the books. We never sell or share your numbers.
Shared only when you say
Nothing is emailed or sent anywhere until you turn it on. A fuel supplier sees fuel and tanks only, for the stations you choose, and loses access the moment you take it away.
Signing in
A login for each person
Owner, manager, staff, bookkeeper, fuel supplier, management company: each sees only their stations and only what their role allows. Every change and every download is written to an audit log the owner can read.
Two-step sign-in
Turn on a code from an authenticator app, with one-time recovery codes. Passwords are stored as bcrypt hashes, repeated wrong passwords are slowed down, and reset links work once, for 30 minutes.
Time clock PINs
Clerk PINs are stored as keyed hashes, and too many wrong PINs in a minute lock the pad for that store.
Payments and outside services
Your subscription is paid through Paysafe
You type your card into Paysafe's secure payment form, which Paysafe serves itself. FuelIQHub gets back only a token and the last four digits, so the card data that PCI rules cover never reaches our servers.
Ask your store
Quick answers are worked out on our own server. Typed questions use Anthropic's Claude only after the owner switches them on; the question and the figures needed to answer it are sent, approval codes and card details never are.
Nearby pump prices
If you add it, your station's address is used to look up nearby prices on Google. Nothing else about your store is sent.
What we do not claim: FuelIQHub is not a payment processor and does not hold a SOC 2 or PCI certificate. We keep card data out of our systems instead. Questions about any of this are answered by the person who built it; use the install form and ask.