Privacy Policy

1. Introduction

EasyFlow360 is operated by Mundyal Technology LLC (a Massachusetts limited liability company based in Holden, Massachusetts, United States; "we," "us," or "our"). This Privacy Policy covers the EasyFlow360 platform available at app.easyflow360.com and the EasyFlow360 mobile application (collectively, the "Service"), and explains how we collect, use, disclose, and safeguard your information when you use it.

2. Information We Collect

We collect information you provide directly to us, information we obtain automatically when you use the Service, and information from third-party sources you authorize.

Personal Information

When you create an account or use our Service, we may collect your name, email address, phone number, company name, and billing information.

Business & Financial Data

As a business management platform, we process financial documents, bank statements, journal entries, invoices, and other business records you upload or create through the Service. This data belongs to you and the businesses you work with. When you upload a bank or card statement, the document is sent to an automated document-processing provider to read the transactions out of it, and transaction descriptions may be sent to the same provider to suggest a bookkeeping category. Section 5 names that provider.

Financial Account Information

If you choose to connect a bank or credit-card account, we receive account information, such as account name, type, mask (last four digits), balances, and transaction history, from your financial institution through our data provider, Stripe Financial Connections. This happens only with your explicit authorization, granted when you complete the connection flow. Stripe's handling of this data is described in the Stripe Privacy Policy.

Usage Information

We automatically collect information about your interactions with the Service, including IP address, browser type, device information, pages visited, and timestamps.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Import connected-account balances and transactions into your books for categorization, review, and bank reconciliation
• Read the transactions out of statements you upload, and suggest a bookkeeping category for a transaction, using the automated document-processing provider named in Section 5
• Process transactions and send related information, including invoices and payment confirmations
• Send administrative notifications such as document uploads, signature requests, and appointment reminders
• Respond to your inquiries and provide customer support
• Monitor and analyze usage trends to improve the user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

Financial account information obtained through Stripe Financial Connections is used solely to provide bookkeeping and reconciliation features to the account holder who granted access. We do not use it for lending or credit decisions, do not sell it, and do not use it for advertising.

4. Data Storage & Security

We implement industry-standard security measures to protect your data. All traffic is encrypted in transit (TLS/SSL). Our database and our off-site backups are encrypted at rest. Access is controlled by role, passwords are hashed and never stored in plain text, and two-factor authentication is available to every user. Documents and files you upload are stored on access-controlled infrastructure.

Our application infrastructure, database, and file storage run on managed cloud infrastructure. Some service providers we use (including our payment and financial-data provider, Stripe) process and store data outside your country of residence. Your information may therefore be transferred to, and processed in, jurisdictions other than your own, subject to appropriate safeguards.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Within your company: Data is shared among authorized users of the same company based on role-based permissions
• With businesses you work with: Documents, invoices, and books published to a business's workspace are accessible to that business's designated users
• Payment & financial-data processing: We share necessary information with Stripe to process payments and to retrieve financial account data you have authorized
• Document and transaction processing: When you upload a bank or card statement, the document is sent to Anthropic (Claude) to read its transactions; transaction descriptions and payees may also be sent to suggest a bookkeeping category
• Service providers: We use trusted third-party services for hosting, data storage, backups, and email delivery
• Legal requirements: We may disclose information when required by law, regulation, or legal process

Who processes data on our behalf

• Stripe: payment processing, payout accounts, and the bank and credit-card connections you authorize (Stripe Privacy Policy)
• Anthropic: reading transactions out of statements you upload, and category suggestions. Anthropic does not use data submitted through its API to train its models (Anthropic Privacy Policy)
• Our hosting, database, and backup providers: running the Service and storing your data
• Our email provider: delivering notifications, invoices, and signature requests

Each of these providers receives your data in order to deliver a specific part of the Service, and is bound by its own published data-processing terms. A current list naming every provider is available on request at contact@easyflow360.com.

6. Connected Accounts: Your Control

You can disconnect a connected bank or credit-card account at any time from within the Service, or through Stripe's consumer consent tools. Disconnecting stops all future data retrieval; transactions already imported into your books are retained as part of your business records unless you delete them. When a connected account is permanently removed from the Service, we also revoke our access with the data provider.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Export your data in a portable format
• Opt out of non-essential communications
• Restrict or object to certain processing activities

To exercise any of these rights, please contact us at the email address listed below.

9. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We may also use analytics tools to understand how users interact with the Service. You can manage cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Language

This Privacy Policy is published in English. A Brazilian Portuguese translation is available at easyflow360.com/pt/privacy, and the app serves the same translation when your language is set to Portuguese. The translation is there to be read, not to replace this text: where the two differ in meaning, the English version governs.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

contact@easyflow360.com

Mundyal Technology LLC, Holden, Massachusetts, United States