FlowTal CashPulse · Legal

CashPulse Privacy Policy

Last updated: 7 October 2026

This policy covers FlowTal CashPulse — the cash-management app — and the information people and companies keep in it. The FlowTal website and early-access list are covered by the FlowTal website Privacy Policy. Using CashPulse is also covered by the CashPulse Terms of Service.

1. Who we are and our role

FlowTal CashPulse is provided by FlowTal ("we", "us"). FlowTal's company registration is in progress; this policy will name the registered company when it is complete.

For the company data a customer keeps in CashPulse (bank accounts, entries, budgets and so on), the customer company decides what is kept and why. We process it on the customer's behalf, only to run CashPulse for them.
For account information (who signs in, billing contacts, how the service is used) we are responsible for it, as described below.

2. What we collect

Information	Examples	Why
Your account	Name, work email, password (stored only as a secure code by our sign-in provider, never readable by us), profile photo if you add one, two-step verification set-up	To let you sign in and keep your account secure
Your company's CashPulse	Company and entity names, country and currency, bank accounts, entries, balances, cash-burn layouts, budgets, attachments and settings that your company's users enter or import	To provide CashPulse to your company
Users and access	Who is invited to a company, their role and what they may see and do	To apply each company's access rules
Activity log	Who did what and when in each company (for example a change, an export or a sign-in), with the server's time and the person's device time, time zone and browser	So each company can see who changed what — a record its owner controls
Plan and billing	Plan, trial and payment status, invoices, billing contact	To manage your subscription
Technical records	Records kept by our hosting provider for security and to keep the service running (such as IP address and the requests made)	Security, preventing abuse, fixing problems

3. Google and Microsoft accounts

You can sign in with Google or Microsoft instead of a password. When you do, we receive only your name, email address and profile picture from that account, to create and identify your CashPulse account.

A company's owner can also turn on a daily backup of the company's CashPulse to the company's own Google Drive or Microsoft OneDrive:

Google Drive — CashPulse asks only for permission to work with the files CashPulse itself creates (Google's "drive.file" permission). It cannot see, open or change any other file in that Drive.
Microsoft OneDrive — CashPulse uses the permission only to save its own backup files to the folder chosen for CashPulse backups and to read them back when you restore. It does not open, read or change any other file.
The backup files contain only that company's CashPulse data. The connection can be removed at any time in CashPulse (Settings › Backup & restore) or in your Google or Microsoft account settings.

Google API Limited Use. FlowTal CashPulse's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google or Microsoft data for advertising, we do not sell it, we do not use it to train AI models, and no person at FlowTal reads it except where you ask us to for support, where needed for security, or where the law requires it.

4. How we use information

To provide, secure and support CashPulse, and to keep each company's data separate from every other company's.
To send service emails — for example confirming your email, resetting a password, invitations, trial and billing notices.
To improve CashPulse using counts and usage figures that do not include your company's financial figures.

FlowTal staff never see a company's bank figures. Our administration tools show a company's plan, status and usage counts only; the database rules prevent staff from opening a company's bank book. If a company asks us for help that needs a look at its data, we ask its owner's permission first.

5. Who we share it with

We do not sell personal information or company data. We use these service providers, who process data for us under their own security and data-protection terms:

Google Cloud / Firebase — hosting, sign-in, the database and FlowTal's central backup.
Google and Microsoft — only when you choose to sign in with them or to back up to Google Drive or OneDrive.
A payment provider — for paid plans; we will name it here before paid plans start.

We may disclose information if the law requires it, and only to the extent required.

6. Where data is stored

Each company's CashPulse is stored in Google Cloud in Singapore. FlowTal's central backup copy is kept in Google Cloud in Mumbai, India, so a problem in one place cannot affect both. Our providers may process data in other countries; where that happens they apply the safeguards required by law.

7. How long we keep it

While a company's subscription or trial is active, its data is kept.
If a trial ends, or a subscription ends and is not paid, the company's CashPulse becomes read-only and is then deleted after the period shown in the app and in our emails (currently 30 days). We warn the owner before deletion.
FlowTal's central backup copies are kept for up to 35 days (daily copies) and 12 months (monthly copies), then deleted automatically.
Activity logs are kept for the period set for the company (currently 24 months).

8. Security

Data is encrypted while it travels (HTTPS) and while it is stored. Every user signs in with their own account, two-step verification is available (and can be required by a company's owner), access is set per company and per role, and changes are recorded in the activity log. Each company's data is separated by database rules, and we test restoring from backup regularly.

9. Your rights and choices

You can see and correct your account details in CashPulse (My profile). A company's owner can download a full copy of the company's data at any time (Settings › Backup & restore) and can ask us to delete it. You can ask us to access, correct or delete your personal information, or to stop processing it, by emailing contact@myflowtal.com; if the information belongs to a company's CashPulse, we will work with that company's owner. We reply within 30 days. Depending on where you live you may also complain to your data-protection authority.

10. Children

CashPulse is for businesses and is not meant for anyone under 18.

11. Changes and contact

If we change this policy we will update the date at the top, and tell company owners by email before an important change takes effect. Questions about this policy: contact@myflowtal.com. Help with using CashPulse: support@myflowtal.com.