Privacy Policy

Cashflow (cashflow.tech) is a personal financial management service built and operated by Adam Messinger. It helps users track spending, categorize transactions, monitor recurring bills, and analyze cash flow trends.

What we collect

• Google account info: name, email address, and profile picture — used solely for authentication via Google Sign-In.
• Financial data: bank transaction records, account metadata (institution name, account type, last four digits), and balances — imported via Plaid or CSV upload. This data is stored in a private database and is never sold to third parties.
• User classifications: categories, tags, parties, and rules you create to organize your transactions.

How we use your data

All data is used exclusively to provide financial tracking and analysis features within the Cashflow service. We do not sell or distribute user data to third parties for their own purposes.

AI assistant integrations

Cashflow can be connected to AI assistants (such as ChatGPT, Claude, or other MCP-compatible clients) via an authorized API. When you use Cashflow through an AI assistant:

• Your queries and Cashflow's responses flow through the AI provider's systems. The AI provider's own privacy policy governs how they handle that data.
• Cashflow only shares data you explicitly request through tool calls (e.g., spending summaries, transaction lists). No bulk data export occurs.
• You can disconnect Cashflow from any AI assistant at any time by revoking access in your Cashflow account settings or the AI provider's settings.

Embedded AI assistant

Cashflow includes an embedded chat assistant powered by Anthropic, PBC (a sub-processor). When you use the in-app chat:

• Transaction descriptions, amounts, categories, parties, and account metadata may be sent to Anthropic Managed Agents to answer your questions and perform analysis.
• Cashflow may initiate an agent session on your behalf to perform initial setup analysis after you connect your first bank. These auto-initiated sessions are read-only — categorization suggestions, party resolution, and rule proposals — and any writes (creating rules, applying categories, etc.) require your explicit confirmation.
• You can opt out of the embedded assistant at any time by emailing help@cashflow.tech; doing so disables the in-app chat without affecting your bank connections or other Cashflow features.

Third-party services

• Google OAuth: for authentication only.
• Plaid:for optional bank account connections. Plaid's own privacy policy applies to data processed through their service.
• Vercel: hosting infrastructure.
• Turso: database hosting.
• Anthropic, PBC:powers the embedded chat assistant (see “Embedded AI assistant” above).
• Google Analytics & Google Ads: for site analytics and advertising attribution. We send hashed (SHA-256) versions of your email and user ID for cross-device measurement. Raw email addresses, transaction data, and account information are never sent to Google.

Data retention and deletion

Data is retained for as long as your account is active. To request deletion of all your data, email help@cashflow.tech with the subject "Data Deletion Request" and your account email. We will delete all associated data within 30 days and confirm by email.

Contact

For questions about this policy, contact help@cashflow.tech.