FTCU Privacy Policy
FTCU Privacy Policy
This policy is maintained at https://palingen.com.au/privacy/ftcu. Support: https://palingen.com.au/support/ftcu.
Updated 16 October 2026 · iPhone, iPad and operations service
FTCU records workplace fuel transactions and supports fleet fuel reporting. This notice covers the current service and retained records from its former system.
Fuel submissions include the work identifier entered by the operator, vehicle identifiers, odometer, fuel quantity and price, pump/site and transaction time, plus relevant notes and submission identifiers. Device enrolment and authentication information, delivery state and administrative/security records help the service accept authorised submissions and prevent duplicates. Fleet lookups use vehicle identifiers to obtain information from the organisation’s VARMFC service.
The current app sends signed submissions over HTTPS to the FTCU Cloudflare device service. Cloudflare Workers process requests, D1 stores operational records and R2 stores generated reports. Resend delivers report emails to authorised recipients and processes the addresses and report contents. The former Google Apps Script/Workspace system is not the current submission backend; retained historical Google records are separate legacy business records.
Camera scanning reads vehicle text or codes on the device. Scanning is not a general camera-image upload service. The app does not use advertising identifiers or third-party advertising/analytics to profile staff. Work and vehicle information is used to run, reconcile, audit and report on fuel operations.
Unsent or failed submissions are kept in the local retry queue for up to 30 days. A local retry limit is not a retention limit for records already accepted by the service. Operational fuel records and generated or emailed reports are retained according to the fleet operator’s business and compliance needs; there is no universal automatic deletion period for those records. Expired request nonces are cleaned up separately; job-run records have a 180-day cleanup. Copies already emailed or held in legacy archives are managed separately.
The organisation running fuel operations controls its work records and access. Ask its administrator about an incorrect transaction or a request for access or deletion. Palingen can help route a privacy question through the contact below. Revoking a device prevents future access but does not automatically delete submitted transactions. Information is not sold or used for advertising.
Palingen publishes this app and this notice. Where your organisation uses the app for workplace operations, that organisation controls the operational records it enters and the staff who can access them. Contact your administrator about those records, or contact Palingen for help routing a request.
Hosting, security, email and platform providers process information needed to deliver their services. Cloudflare hosts this policy website and relevant Cloudflare services described above. Provider networks and subprocessors can process information outside Australia. Provider logs, recovery snapshots and backups can have separate retention periods. These policy pages do not send a visit to Palingen’s visitor-printer feed.
Use the contact below for privacy questions, access or correction requests, deletion requests and complaints. Include the app name and enough detail to locate the relevant information, without passwords, enrolment codes or unnecessary customer information. Identity may need to be verified. We will consider the request and explain any limits, including records controlled by your organisation, legal retention, backups or copies already printed or shared.
If a concern is not resolved, you can contact the Office of the Australian Information Commissioner where applicable. This policy will be updated at this address when practices change.
Contact: hello@palingen.com.au
FTCU support · OAIC privacy complaints