Privacy Policy

HP Assist ("we", "us") is an independent tool for HP Gas LPG distributors. This policy explains what we collect, why, and what we do with it. The short version: your portal passwords never reach us, and we collect only what is needed to run the service.

1. What we collect

• Google account details. When you sign in with Google we receive your name, email address and profile picture. We use these to identify your account. We do not receive your Google password or access to your Gmail, Drive or any other Google data.
• Chat requests. Questions you type in the panel are sent to Anthropic's Claude model to generate an answer. We store the model used, token counts, the time, the reply language, the portal you had open, and the first 160 characters of your question, so we can operate the service and show usage in your account.
• Captcha images. When you use one-click login, the portal's captcha image is sent to Anthropic's Claude model to be read. We do not store the image.
• OTP messages. The HP Assist Android app reads the notifications your messaging app shows for incoming SMS (it does not read your SMS inbox and holds no SMS permission). It forwards a message only when it is from HPCL or names an HPCL portal (CDCMS, Report Module, Sales Portal, HP Gas Mail, myHPGas) and contains a one-time code. Bank, shopping and personal messages are never read or sent, and our server refuses any message that is not an HPCL portal message. The app is paired to your account with a one-time code from the panel and holds its own token; codes it forwards can only ever be read by your account. We receive the code, the sender and the message text and keep them for at most a day.
• Payments. Payments are processed by Razorpay. We store the order id, plan, amount, status and time. We never receive or store your card, UPI or bank details.
• Technical logs. Standard server logs (IP address, time, request path, status) kept for a short period for security and debugging.

2. What we do not collect

• Your HPCL portal credentials (distributor code, user IDs, passwords) are stored only inside your Chrome browser on your own computer, using Chrome's extension storage. They are never sent to our servers.
• We do not read, store or transmit the contents of the HPCL portal pages you visit, other than the login form fields the extension fills and the captcha image described above.
• We do not sell, rent or share personal data with advertisers.

3. Why we use it

To sign you in, complete portal logins, answer your questions, show you your usage and plan, take payments, prevent abuse, and improve the service.

4. Who else sees it

• Google — for sign-in (Google's privacy policy applies to that step).
• Anthropic — receives your chat questions and captcha images to generate answers, under Anthropic's commercial terms, which do not permit training on that data.
• Razorpay — processes payments.
• Google Cloud — hosts our server.

We may disclose data if required by law.

5. How long we keep it

• Account details: while your account exists.
• Usage records: up to 12 months.
• OTP messages: deleted on a rolling basis; only the most recent codes are kept.
• Payment records: 8 years, as required for accounting.

6. Your choices

• Remove the extension from Chrome to delete your locally stored portal credentials, or clear them from the panel's settings.
• Uninstall the OTP app to stop SMS forwarding at any time.
• Write to us through the contact form, giving the Google address you sign in with, to see, correct or delete your account and its data. We act within 30 days.

7. Security

All traffic between the extension, the phone app and our server is encrypted (HTTPS). Sign-in sessions are stored on our server, expire after 30 days, and can be revoked at any time from the panel ("Sign out everywhere else"). Payment keys are encrypted at rest. Every administrative action is recorded in an audit log. Server access is restricted to the operator.

8. Children

HP Assist is a business tool and is not intended for anyone under 18.

9. Changes

We will post any changes here with a new date. Continued use after a change means you accept it.

10. Contact

HP Assist is operated from India. Contact: the contact form at hpassist.online/contact.