What we keep about you
If you order gas: your name, your phone number, the delivery address you type, and your orders — what you bought, from which dealer, when, and how you paid. An email address only if you signed in with one, or with Google.
If you pin your location when saving an address, we store those coordinates alongside the address you wrote. That is optional at every step, the written address is still the address of record, and you can remove the pin at any time.
Your phone number, and the codes
Signing in sends a six-digit code by SMS. The code is stored only as a bcrypt hash, expires after five minutes, and is destroyed once used or once five wrong guesses are made. Nobody at Gas Lagbe can read a live code, including us.
Passwords, where an account has one, are stored the same way — hashed, never readable.
If you apply to sell
A dealer application asks for your name, shop name, shop address, phone, email, and a photograph or scan of your NID or trade licence. The document is checked by a person before an account is created.
That document is never stored in a public folder and never has a public URL. It is written outside the web root and can be read only by a signed-in administrator through a route that checks who is asking.
Approved dealers also give us bank details so they can be paid. Those are visible to the dealer and to administrators, and to nobody else.
Riders and location
A rider can switch on location sharing while they are delivering. While it is on, their position is sent to us periodically so the customer waiting for that delivery can see the rider approaching.
It is a switch the rider controls. Turning it off clears the stored position as well as stopping the updates, so no stale pin is left behind. We do not track riders when they are not delivering.
Who else sees any of this
The dealer fulfilling your order sees what they need to fulfil it: your name, your phone number, your delivery address, and the order itself. The rider assigned to it sees the same, for that delivery.
Outside Gas Lagbe, three services are involved and only three. Alpha SMS (sms.net.bd) receives your phone number and the message text, to deliver sign-in codes. Google receives a sign-in request if you choose to sign in with Google. An email provider carries dealer approval mail.
There are no analytics, no advertising networks and no third-party trackers on this site or in the apps. Nothing about you is sold, and nothing is shared for marketing.
How long we keep it
Orders are kept as a record of the transaction, for you and for the dealer. Sign-in codes are gone within minutes. Application documents are kept while an application is being reviewed and for as long as the resulting dealer account exists.
You can delete your account yourself: Settings, then Delete account, in the app or on the website. That removes your name, number, addresses and payment details and signs you out everywhere. Orders already delivered stay in the dealer's own records without your details, which are theirs.
Children
Gas Lagbe is not for children. LPG is a controlled product and accounts are for adults ordering for a household or running a business.