India's first AI-powered fuel management software

LEGAL

Privacy Policy

What we collect, why we collect it, and what you can make us do about it.

In effect from 1 June 2026

1. What this covers

This policy covers two different things, and the difference matters. The first is this website. The second is the Maxify Fuels application that a petrol pump subscribes to.

It applies to personal data handled in India under the Digital Personal Data Protection Act 2023 (the DPDP Act) and the Information Technology Act 2000 with its rules.

2. Who is responsible for what

This is the part most policies gloss over, and on this product it decides who you should actually be talking to.

For your account and billing — the person who signs up, the pumps on the subscription, the invoices — we decide what is collected and why. In DPDP terms we are the Data Fiduciary, and this policy governs.

For everything inside your pump's account — meter readings, cash entries, your employees' names, salaries, attendance and deduction records — you decide. You are the Data Fiduciary for your staff's personal data; we process it on your instructions, as a Data Processor, and we do not use it for our own purposes. If one of your attendants wants to know what is held about them, the answer comes from you, and we will help you produce it.

3. What this website collects

Very little, and none of it identifies you.

  • A NEXT_LOCALE cookie storing your language choice, so the site opens in the language you picked. It lasts a year, holds one of three values, and you can clear it any time.
  • A short-lived browser sessionStorage entry recording that you have already seen the opening animation, so returning visitors do not sit through it twice. It never leaves your device and clears when you close the tab.
  • Standard server request logs kept by our hosting provider, which include IP address and browser type, used for security and diagnostics.

There is no analytics on this site, no advertising pixel and no third-party tracking script. The fonts are self-hosted at build time, so loading a page here makes no request to Google or anyone else. If that changes, this section changes with it.

Messaging us on WhatsApp means your message and phone number are also handled by WhatsApp under Meta's own privacy policy — that is outside our control, and emailing us instead avoids it.

4. What the application collects

When your pump subscribes, the product holds what it needs to run the daily loop:

  • Account data — name, phone number, email, business name and role of each user you create.
  • Operational data — meter readings, fuel prices, tank and dispenser ledgers, purchases, write-offs, DIP logs, and the photos captured during the morning routine.
  • Financial data — cash, UPI and card collections, discrepancies, and non-fuel GST invoices with your GSTIN.
  • Employee data — the staff records you enter: names, roles, shift assignments, salaries, salary revisions, and any penalty deductions linked to a flagged discrepancy.
  • Billing data — your subscription, plan and payment records.

Card details are never stored by us. Subscription payments are handled by a payment gateway, which holds those details under its own compliance obligations.

5. Why we hold it

To operate the service you are paying for: computing expected revenue, reconciling collections, flagging discrepancies, producing GST-compliant invoices, and running payroll calculations you have configured.

To support you when something does not add up, to bill you, to keep the service secure, and to meet obligations under tax and company law. We do not sell personal data, and we do not use your operational data to advertise anything to anyone.

6. Who else sees it

A small, deliberate list. Each of these is bound to use the data only to provide their service to us:

  • Our cloud hosting and database providers, which run the infrastructure the product sits on.
  • Our payment gateway, for subscription payments.
  • Communication providers used to send transactional messages and email.
  • Professional advisers and auditors, where the law requires it.
  • A lawful authority, where we are legally compelled — and we will tell you unless we are forbidden from doing so.

7. How long we keep it

Operational and employee data stays for as long as your subscription is active, because a pump's ledgers are only useful with history behind them.

After you close your account we keep it for a limited wind-down period so you can export it, then delete or irreversibly anonymise it — except records we are required to retain, such as invoices and tax records, which are kept for the statutory period and used for nothing else.

8. Your rights

Under the DPDP Act, in respect of personal data for which we are the Data Fiduciary, you may:

  • Ask what personal data we hold about you and how it has been processed.
  • Have inaccurate or incomplete data corrected, updated or completed.
  • Ask for erasure, where we are not required to keep it.
  • Withdraw consent you have given, as easily as you gave it.
  • Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
  • Complain to us first, and to the Data Protection Board of India if we do not resolve it.

If your request concerns data inside an employer's Maxify account — your salary record or a deduction, for instance — that employer is the Data Fiduciary. Ask them; we will support them in answering you.

9. Keeping it safe

We describe our security posture in detail on a separate page rather than in one vague sentence here. No system is perfectly secure, but if a personal data breach affects you we will notify you and the Data Protection Board of India as the DPDP Act requires.

10. Children

Maxify Fuels is business software and is not directed at anyone under 18. We do not knowingly collect a child's personal data. If you believe we have, tell us and we will delete it.

11. Changes to this policy

When this policy changes materially we will update the effective date at the top of this page and, for anything that affects how your data is handled, tell subscribers directly rather than relying on you to re-read it.

12. Grievance redressal

The DPDP Act requires us to name someone who will answer you. Complaints about how your personal data has been handled go to our Grievance Officer, and we aim to respond within the period the law allows. If you are not satisfied with the outcome, you may escalate to the Data Protection Board of India.

Registered name
Cytoscan Intelligence Technologies Private Limited
Entity type
Private Limited Company
CIN
U58200KL2024PTC091198
Registered office
Office No. 04, Golden Jubilee Building
CSIR - National Institute for Interdisciplinary Science and Technology (NIIST)
Pappanamcode, Thiruvananthapuram
Kerala 695019
Governing law
Thiruvananthapuram, Kerala
Grievance Officer
Ms. Anagha K Radhakrishnan
General Manager
gm@cytoscanresearch.com