Privacy Policy

1. Introduction

EasyFlow360 ("we," "us," or "our") operates the EasyFlow360 platform available at app.easyflow360.com and the EasyFlow360 mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information you provide directly to us, information we obtain automatically when you use the Service, and information from third-party sources you authorize.

Personal Information

When you create an account or use our Service, we may collect your name, email address, phone number, company name, and billing information.

Business & Financial Data

As a business management platform, we process financial documents, bank statements, journal entries, invoices, and other business records you upload or create through the Service. This data belongs to you and the businesses you work with.

Financial Account Information

If you choose to connect a bank or credit-card account, we receive account information — such as account name, type, mask (last four digits), balances, and transaction history — from your financial institution through our data provider, Stripe Financial Connections. This happens only with your explicit authorization, granted when you complete the connection flow. Stripe's handling of this data is described in the Stripe Privacy Policy.

Usage Information

We automatically collect information about your interactions with the Service, including IP address, browser type, device information, pages visited, and timestamps.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Import connected-account balances and transactions into your books for categorization, review, and bank reconciliation
• Process transactions and send related information, including invoices and payment confirmations
• Send administrative notifications such as document uploads, signature requests, and appointment reminders
• Respond to your inquiries and provide customer support
• Monitor and analyze usage trends to improve the user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

Financial account information obtained through Stripe Financial Connections is used solely to provide bookkeeping and reconciliation features to the account holder who granted access. We do not use it for lending or credit decisions, do not sell it, and do not use it for advertising.

4. Data Storage & Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure cloud storage with access controls, and regular security assessments. Passwords are hashed and never stored in plain text.

Our application infrastructure and database are hosted in the European Union; documents and files are stored in encrypted cloud storage with role-based access controls. Some service providers we use — including our payment and financial-data provider, Stripe — process and store data in the United States. Your information may therefore be processed in both regions.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Within your company: Data is shared among authorized users of the same company based on role-based permissions
• With businesses you work with: Documents, invoices, and books published to a business's workspace are accessible to that business's designated users
• Payment & financial-data processing: We share necessary information with Stripe to process payments and to retrieve financial account data you have authorized
• Service providers: We use trusted third-party services for hosting, email delivery, and analytics
• Legal requirements: We may disclose information when required by law, regulation, or legal process

6. Connected Accounts — Your Control

You can disconnect a connected bank or credit-card account at any time from within the Service, or through Stripe's consumer consent tools. Disconnecting stops all future data retrieval; transactions already imported into your books are retained as part of your business records unless you delete them. When a connected account is permanently removed from the Service, we also revoke our access with the data provider.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Export your data in a portable format
• Opt out of non-essential communications
• Restrict or object to certain processing activities

To exercise any of these rights, please contact us at the email address listed below.

9. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We may also use analytics tools to understand how users interact with the Service. You can manage cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

contact@easyflow360.com