Privacy Policy

1. Introduction

Thrice M Financial Consulting, LLC ("TMF," "we," "us," or "our") operates Flowdiq, an AI-powered cash flow intelligence platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Service. By using Flowdiq, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information you provide directly:

• Account information (name, email address, business name)
• Payment information (processed and stored by Stripe — we do not store card numbers)
• Business profile and settings preferences
• Communications with our support team

2.2 Financial data (via third-party integrations):

• Bank account balances and transaction history (via Plaid)
• Accounting data such as invoices, expenses, and cash flow records (via QuickBooks, Xero)
• This data is accessed only with your explicit authorization and used solely to provide the Service

2.3 Usage data collected automatically:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (device type, operating system)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate AI-powered cash flow insights and alerts personalized to your business
• Process payments and manage your subscription
• Send transactional emails (alerts, digests, receipts)
• Respond to your support requests
• Monitor for security threats and prevent fraud
• Comply with legal obligations
• Analyze usage patterns to improve product features

We do not sell your personal information or financial data to third parties. We do not use your financial data for advertising purposes.

4. How We Share Your Information

We share your information only in the following circumstances:

• Service providers: Trusted third parties that help us operate the Service (Plaid, Stripe, Auth0, Resend, Vercel, Neon). These providers are contractually obligated to protect your data.
• AI processing: Financial data summaries are sent to Anthropic's Claude API to generate insights. Data is processed per Anthropic's privacy and security policies.
• Legal compliance: When required by law, subpoena, or other legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
• With your consent: In any other circumstances with your explicit permission.

5. Financial Data Security

We take the security of your financial data seriously. Our safeguards include:

• All data is encrypted in transit (TLS) and at rest
• Bank credentials are never stored — Plaid handles authentication directly
• Access tokens are stored encrypted in our database
• Access to production systems is strictly limited to authorized personnel
• We use Neon serverless PostgreSQL with SOC 2 compliance

No system is 100% secure. In the event of a data breach affecting your information, we will notify you as required by applicable law.

6. Data Retention

We retain your account information and financial data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or compliance purposes.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time
• Revoke access: Disconnect bank or accounting integrations at any time from Settings

To exercise any of these rights, contact us at info@thricemfinancial.com.

8. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

9. Third-Party Services

The following third-party services are used in the operation of Flowdiq:

10. Children's Privacy

Flowdiq is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 14 days before changes take effect. Your continued use of the Service after changes are effective constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: