Privacy Policy

Last updated: October 10, 2026

Who we are

GasGo is a service operated by Orisun Systems and Technologies, a company registered in Nigeria with RC number 9464036 (“we”, “us”). We are the data controller for the personal data described in this policy, and we handle it in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the directives of the Nigeria Data Protection Commission (NDPC).

This policy explains what personal data we collect, why we collect it, the lawful basis for processing it, how long we keep it, who we share it with, and the rights you have.

Data we collect

• Account data — name, email address, phone number, and authentication identifiers.
• Delivery data — delivery addresses, city/LGA, landmark, and the location details you provide so we can deliver.
• Order data — your order history, delivery status, and support conversations.
• Payment data — payment references, wallet transactions, and receipts. We do not store full card numbers; card data is handled by our payment processor.
• Device and technical data — app version, device identifiers, IP address, and diagnostic logs.
• Location data — collected from riders during deliveries so customers can track an order. Customer location is only used for the address you supply.
• Notification data — push tokens and your messaging preferences.
• Energy profile data — optional information you give us (household size, cylinder size, refill frequency, cooking hours, monthly electricity spend) used to recommend products and remind you when a refill is due.

Lawful basis for processing

Under the NDPA we rely on the following bases:

• Performance of a contract — to create your account, take payment, deliver your order, and provide live tracking.
• Legitimate interests — to keep the service secure, prevent fraud and abuse, and improve reliability. We balance these against your rights.
• Consent — for marketing messages, energy tips, and optional profiling. You may withdraw consent at any time.
• Legal obligation — to keep transaction and tax records, and to respond to lawful requests.

How we use your data

• To create and manage your account.
• To fulfil orders, dispatch riders, and provide live tracking.
• To process payments and maintain wallet balances.
• To send service updates, receipts, and support notifications.
• To detect and prevent fraud, abuse, and misuse of promotions.
• To improve reliability, security, and app performance.
• To send promotions, reminders, and tips only where you have opted in.

Payments

Card and bank payments are processed by our payment provider. We do not store full card numbers on our servers. We retain payment references, amounts, and status so we can reconcile transactions, handle disputes, and meet accounting obligations.

Who we share data with

We share personal data only with service providers who help us run the service, and only to the extent they need it. These include our payment processor, cloud and hosting providers, messaging (SMS and push) providers, mapping providers, and bill-payment partners. Riders receive the delivery name, phone number, and address needed to complete a delivery.

We do not sell your personal data.

Retention

• Account and profile data — kept while your account is active, and deleted or anonymised within 30 days of a verified deletion request.
• Order and delivery records — kept for 6 years to meet accounting and tax obligations and to resolve disputes.
• Transaction and wallet records — kept for 6 years for financial and audit purposes.
• Diagnostic and security logs — kept for up to 12 months.
• Marketing consent records — kept until you withdraw consent, plus a short period to evidence the withdrawal.

Your rights

Under the NDPA you have the right to:

• Be informed about how your data is used — this policy does that.
• Access the personal data we hold about you. You can export it from the app under Profile → Privacy & Security.
• Rectify inaccurate data. You can edit your profile and addresses in the app.
• Erasure — request deletion of your account and data (see the Data Deletion page).
• Restrict or object to processing, including direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Lodge a complaint with the Nigeria Data Protection Commission.

Security

We use technical and organisational safeguards including encryption in transit, access controls, and audit logging of administrative actions. No system is completely secure, so we cannot guarantee absolute security — but we will notify you and the NDPC without undue delay if a breach affects your personal data.

Children

GasGo is not intended for anyone under 18. We do not knowingly collect data from children.

Cookies and the website

The GasGo website uses only the cookies and local storage needed to make the site work. We do not use advertising or third-party tracking cookies on this site.

International transfers

Some of our service providers process data outside Nigeria (for example cloud hosting and messaging). Where that happens we take steps to ensure your data receives an adequate level of protection, as required by the NDPA.

Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version, and material changes will be notified in the app or on this website.

Contact us

Data protection enquiries, including requests to exercise your rights, should be sent to privacy@gasgo.app. General support is available at support@gasgo.app.

Orisun Systems and Technologies · RC 9464036 · Nigeria.