Privacy Policy.

From you directly, we may collect:

• Account information: name, email address, password (hashed), and the organization details you provide during signup or in settings.
• Business records you create: clients, invoices, quotes, recurring billing profiles, tax rates, payments, and any documents or logos you upload.
• Payment information, if and when paid plans are introduced. Card numbers are handled by our payment processor and are not stored on FluxFina servers.

From your contacts (the recipients of invoices and quotes you send) we collect the recipient details you put on the documents you create (name, email address, billing address, tax ID); only as needed to render and deliver those documents on your behalf.

We also collect automatically, like most websites: IP address, browser and device type, referring and exit pages, the files viewed on our Service, operating system, and a date/time stamp. Used to analyze trends in the aggregate, secure the Service, and administer the site.

• To provide, secure, and operate the Service: rendering invoices, sending emails on your behalf, maintaining your account.
• To communicate with you about the Service: transactional messages, security notices, and (only with separate consent) product updates.
• To analyze how the Service is used, in aggregate, and to improve it.
• To comply with legal obligations, resolve disputes, and enforce our agreements.

We do not sell your personal information.

FluxFina uses cookies and similar technologies to keep you signed in (essential), to remember your preferences (functional), and to understand how the Service is used (analytics). You can manage your preferences for non-essential cookies on the Cookie settings page.

We follow generally accepted standards to protect personal information, both in transit (TLS) and at rest. Data is stored on Neon Postgres with per-tenant row-level security; finalized invoice PDFs are stored on Supabase Storage with access keys held by FluxFina, not by other tenants. Access to production systems is restricted to FluxFina personnel who need it to operate the Service.

No service can be guaranteed against compromise. If you believe your account has been accessed without authorization, contact us immediately at security@fluxfina.com.

Depending on where you live, you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. Account deletion and per-record CSV exports (invoices, clients, quotes) are available directly in the app. For any other request, contact us at privacy@fluxfina.com. We will respond within a reasonable time.

For personal information about your contacts (the recipients of invoices and quotes you create), FluxFina acts as a data processor on your behalf; you are the data controller. If one of your contacts asks us to remove their information, we will direct them to you.

We retain account data and business records (invoices, quotes, payments) for as long as your account is active, or as needed to comply with our legal obligations (for example, tax-record retention requirements that apply to invoices).

When you terminate your account, FluxFina permanently deletes the Customer Data. Use the per-record exports available in the app (invoices, clients, quotes) to retain copies of anything you need before terminating.

FluxFina’s infrastructure and sub-processors operate in the regions noted in the sub-processor table. By using the Service you consent to the transfer of your personal information to those regions. Where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.

We may update this Privacy Policy to reflect changes to our practices. Material changes will be announced by email (to the address on your account) or by a prominent notice on the Service before the change takes effect. The Effective date in the header always reflects the most recent revision.

Questions about this policy can be sent to privacy@fluxfina.com.