Privacy Policy

We collect and process information that is reasonably necessary to onboard, secure, and operate commercial LPG accounts, including:

• Authorized-user details: name, mobile number, role, account access, OTP and session records, support communications, and security events.
• Business and outlet details: legal and trade names, GSTIN and other approved identifiers, registered and delivery addresses, delivery coordinates, outlet contacts, LPG requirements, cylinder stock and return information, and serving-agency assignment.
• Commercial and operational records: quotations, negotiated prices, orders, deliveries, standing requirements, invoices, payment allocations, credit limits, credit status, net terms, balances, disputes, support cases, and audit history.
• App and device information: app version, device platform, notification permission status, encrypted push-notification token, and limited technical logs needed for security and reliability.
• Documents: business or verification documents submitted through approved workflows when private document storage is enabled.

We do not store payment-card credentials in the current service. We do not sell personal information or use it for third-party behavioural advertising.

We use the information to verify and administer business accounts; authenticate authorized users; prepare quotations; accept and fulfil orders; coordinate deliveries; manage invoices, credit and recorded payments; provide operational analytics and support; send transactional notifications; prevent misuse; maintain audit trails; and meet contractual, tax, accounting, security, and other legal obligations.

Where consent or a separate notice is required, we will provide it at or before the relevant collection or permission request. Users can decline optional device permissions, although the related feature may then be unavailable.

We may send OTPs, registration confirmations, order and delivery updates, invoice reminders, payment confirmations, credit-status updates, support-case updates, and standing-order reminders through the app, SMS, or other approved communication channels. Push notifications can be disabled through device settings. Transactional records may still remain available inside the app.

We share only the information needed for the relevant business purpose with:

• the approved serving agency and authorized delivery or operational personnel responsible for the account;
• infrastructure, database, storage, security, support, messaging, and notification providers acting for us, including DigitalOcean for cloud infrastructure and Expo/Google Firebase for app updates and notifications;
• professional advisers, auditors, insurers, or contractual counterparties where reasonably necessary and subject to appropriate obligations; and
• government, regulatory, judicial, or law-enforcement authorities when disclosure is required by applicable law or a valid legal process.

We do not permit service providers to use account information for their own advertising purposes.

We keep information only for as long as it is needed for the purposes described in this policy. Account and operational information is generally retained while the business relationship remains active. Notification tokens are retained until they are revoked, replaced, or become invalid. OTP challenges and technical security records are retained for limited security and troubleshooting periods.

Orders, deliveries, invoices, payment records, credit decisions, audit trails, support cases, and verification documents may be retained for longer periods where necessary for tax, accounting, contractual, dispute-resolution, fraud-prevention, safety, or other legal requirements. When information is no longer required, we delete it, anonymize it, or securely isolate it until deletion is possible.

We use role-based access controls, tenant and agency scoping, encryption in transit, protected device storage for sessions, encrypted storage for selected server-side secrets, audit logging, monitoring, and controlled administrative workflows. No online service can guarantee absolute security, but we review and improve safeguards as the platform develops.

Subject to applicable law and verification of your identity and authority, you may request access to information associated with you, correction or updating of inaccurate information, account deactivation, erasure of information that is no longer required, or grievance redressal.

Some business and transaction records cannot be immediately deleted when retention is required by law, needed to complete an active transaction, or necessary to establish, exercise, or defend legal claims. Controlled business details such as legal identity, GSTIN, registered phone number, address, and serving-agency assignment are changed through an audited support or approval process.

Send privacy and account-data requests to [email protected]. We may ask for additional information to verify the requester and protect the account.

Munna Gas Connect is a commercial service intended for adult representatives and authorized personnel of registered businesses. It is not directed to children, and we do not knowingly create accounts for children.

We may update this policy when the service, providers, or legal requirements change. The latest version will remain available at this address with its effective date. We will provide an additional notice when a material change requires one.