Privacy Policy

1. Introduction

Cashflow Memo (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial tracking service.

2. Information We Collect

2.5. Data Access and Export

We believe you should have access to and control over your data:

• Data Export: You can download all your transactional data, including categories and notes, from your Cashflow Memo account settings
• Account Data: Your personal financial account data is only accessed by our team when necessary to provide support services
• Analytics: We use aggregated and anonymized data for internal analytics and business purposes, never for individual user tracking

3. How We Use Your Information

We use your information to:

• Provide and maintain our financial tracking service
• Generate monthly cash flow reports and email summaries
• Process payments and manage your subscription
• Send you important service updates and notifications
• Improve our service through analytics and user feedback
• Provide customer support and respond to your inquiries

4. Data Security

We implement robust security measures:

• Encryption: All data is encrypted using 256-bit SSL/TLS encryption both at rest and in transit
• Access Controls: Strict access controls and regular security audits
• Secure Connections: Read-only access to financial institutions through trusted data aggregators
• Data Minimization: We only collect data necessary for our service
• Regular Backups: Secure, encrypted backups of your data
• Multi-Factor Authentication: We use MFA on all internal systems and company devices
• Security Testing: Regular application penetration tests to identify and mitigate vulnerabilities

4.5. Infrastructure and Security Practices

Our infrastructure is built on industry-leading cloud platforms with robust security controls:

• Cloud Infrastructure: Hosted on secure cloud platforms used by leading financial institutions worldwide
• Compliance Standards: Adheres to industry standard security, privacy, and compliance controls including SOC 2, ISO 27001, and PCI DSS requirements
• Access Management: Multi-factor authentication (MFA) required on all internal systems and company devices
• Security Testing: Regular application penetration tests and security assessments to identify and mitigate vulnerabilities

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who help us operate our service
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to the sharing

6. Financial Institution Connections

When you connect your financial accounts, we establish secure, read-only connections through trusted financial data providers. We never store your bank login credentials and cannot make transactions on your behalf. All financial data is aggregated and anonymized for reporting purposes.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Financial transaction data is retained according to tax and legal requirements.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data in a structured format
• Opt-out: Opt out of marketing communications

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and maintain security. You can control cookie preferences through your browser settings, though some features may not function properly without certain cookies.

10. International Data Transfers

Your data may be processed and stored in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will promptly delete it.

12. Transparency Above All Else

What you do in Cashflow Memo, stays in Cashflow Memo.

Our only focus is on building tools that help you improve your finances. We respect your privacy, so we give you transparency and control over your data and keep it private. We don't sell your personal data to third parties for advertising.

Our Privacy Policy comprehensively details our data practices, but we understand that legal documents aren't everyone's favorite thing to read. That's why we provide clear summaries and remain available if you have any questions or concerns. You can always contact us through our support channels or at privacy@cashflowmemo.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our service. Your continued use of the service after such changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@cashflowmemo.com