Cashflow (“Cashflow”, “we”, “us”, or “our”) provides financial management, cash-flow reporting, reconciliation, loan tracking, receipts and payments, and related accounting workflow services through our website and application.
We are committed to protecting personal information and maintaining the confidentiality of financial and accounting information entrusted to us.
1.Scope
This Privacy Policy applies to information processed through:
- Cashflow web applications and dashboards;
- Cashflow accounts and user profiles;
- Accounting, ERP and CRM integrations;
- APIs and connected services;
- Reports and documents uploaded or generated through Cashflow;
- Customer support and communications relating to Cashflow.
This policy should be read together with our Terms of Service and Security Policy.
2.Information We May Process
Depending on how you use Cashflow, we may process the following categories of information.
Account Information
- Name
- Email address
- Mobile number
- Organization or company name
- User role
- Login and authentication information
- Account preferences
Business and Financial Information
Cashflow may process information provided by you or obtained through authorized integrations, including:
- Ledger information
- Voucher information
- Receipts and payments
- Debtor and creditor information
- Invoice and transaction information
- Loan information
- Outstanding balances
- Accounting and financial statements
- Orders and receivables/payables information
- Other accounting or financial records required to provide the service
Technical Information
We may collect limited technical information such as:
- IP address
- Browser type
- Device information
- Operating system
- Login timestamps
- Application activity and audit logs
- Security and error logs
We use such information primarily for authentication, security, troubleshooting, auditing, fraud prevention and service operation.
3.Purpose of Processing
We process information only for legitimate and specified purposes, including:
- Creating and managing user accounts;
- Providing Cashflow services;
- Synchronizing authorized accounting, ERP or CRM data;
- Generating cash-flow and financial reports;
- Performing reconciliation and calculations;
- Tracking receipts, payments, loans and outstanding balances;
- Providing customer support;
- Maintaining application security;
- Detecting and preventing unauthorized access;
- Maintaining audit and activity logs;
- Improving reliability and functionality of the service;
- Complying with applicable legal and regulatory obligations.
We do not use customer financial information for unrelated purposes without appropriate authorization or another lawful basis.
4.Financial and Client Confidentiality
Cashflow recognizes that financial, accounting, taxation, audit and business information may be confidential.
Where Cashflow processes information belonging to a CA firm, professional firm, business or its clients, such information is treated as confidential and is accessed only for authorized business purposes.
We do not sell customer accounting records, financial statements, transaction records or client documents.
We do not intentionally disclose confidential customer information to unrelated third parties except where:
- You have authorized the disclosure;
- It is necessary to provide an explicitly requested service;
- It is necessary for an authorized integration or service provider;
- Disclosure is required by applicable law, regulation, court order or governmental authority;
- Disclosure is necessary to protect the security or legal rights of Cashflow, its users or others.
5.Data Minimization
We seek to process only information reasonably necessary to provide and secure the requested services.
Customers should not upload personal information or confidential information that is not required for the relevant Cashflow functionality.
6.Customer-Controlled Accounting Integrations
Where Cashflow connects to an accounting, ERP or CRM service, the connection is established only after the required authorization.
Depending on the integration, Cashflow may receive information made available through the permissions granted by the customer.
Customers remain responsible for ensuring that they have the necessary authority to connect and process information belonging to their organization or clients.
7.Use of Service Providers
We may use trusted technology and infrastructure providers to operate Cashflow, including providers for:
- Hosting and infrastructure;
- Database services;
- Authentication;
- Email and communications;
- Monitoring and security;
- Backup and disaster recovery;
- Payment processing, where applicable;
- Authorized third-party integrations.
Such providers may process information only to the extent necessary to provide their contracted services and subject to appropriate contractual and security safeguards.
9.Data Security
We use reasonable technical and organizational security measures appropriate to the nature of information processed.
These may include:
- Encryption in transit;
- Secure authentication;
- Role-based access controls;
- Access restrictions;
- Audit logging;
- Monitoring;
- Secure software development practices;
- Vulnerability management;
- Backup and recovery controls;
- Security incident response procedures.
Additional information is provided in our Security Policy.
10.Data Retention
We retain information only for as long as reasonably necessary to:
- Provide the requested services;
- Maintain customer accounts;
- Meet contractual requirements;
- Maintain security and audit records;
- Resolve disputes;
- Comply with applicable legal or regulatory obligations.
Retention periods may vary depending on the type of information and the applicable legal or contractual requirement.
When information is no longer required, it may be securely deleted, anonymized or otherwise disposed of in accordance with applicable requirements and our retention procedures.
11.Your Data Protection Rights
Subject to applicable law and the applicable commencement of relevant provisions, individuals may have rights relating to their personal data, including rights concerning:
- Access to information about processing;
- Correction of inaccurate personal data;
- Erasure where applicable;
- Withdrawal of consent where processing is based on consent;
- Grievance or complaint mechanisms;
- Other rights provided under applicable Indian data-protection law.
Requests may be submitted using the contact details provided below.
12.Consent Withdrawal
Where processing is based on consent, you may withdraw consent through the applicable mechanism provided by Cashflow.
Withdrawal of consent will not affect processing that is otherwise permitted or required by applicable law.
13.Children’s Data
Cashflow is designed for business and professional users and is not intended for children.
We do not knowingly design our services to collect children’s personal data for independent use.
14.International Data Processing
Depending on our infrastructure and service providers, information may be processed or stored in jurisdictions outside India.
Where applicable, such processing will be subject to applicable law and appropriate contractual, technical and organizational safeguards.
Customers requiring specific data-residency arrangements should contact us before using the relevant service.
15.Security Incidents
If Cashflow becomes aware of a security incident affecting customer information, we will assess the incident and take appropriate containment, investigation, remediation and notification steps as required by applicable law and contractual obligations.
16.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- Applicable law;
- Regulatory requirements;
- Our services;
- Security practices;
- Data-processing activities.
The updated policy will be published on this page with a revised “Last Updated” date.
17.Contact
For privacy, data-protection or confidentiality questions, please contact:
| Privacy / Data Protection Contact | whhoohh@gmail.com |
|---|---|
| Grievance Contact | whhoohh@gmail.com |
| Organization | Cashflow |
| Address | Available on request |
Please do not send passwords, authentication credentials or unnecessary confidential financial information through email.
18.Governing Law
This Privacy Policy is governed by the applicable laws of India, subject to the applicable jurisdiction and dispute-resolution provisions.