Privacy Policy

1. Introduction

EasyFlow360 ("we," "us," or "our") operates the EasyFlow360 platform available at easyflow360.com and the EasyFlow360 mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information you provide directly to us, information we obtain automatically when you use the Service, and information from third-party sources.

Personal Information

When you create an account or use our Service, we may collect your name, email address, phone number, firm name, professional credentials, and billing information.

Financial & Client Data

As a practice management platform for CPA firms, we process financial documents, bank statements, journal entries, invoices, and other accounting records you upload or create through the Service. This data belongs to you and your clients.

Usage Information

We automatically collect information about your interactions with the Service, including IP address, browser type, device information, pages visited, and timestamps.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information, including invoices and payment confirmations
• Send administrative notifications such as document uploads, signature requests, and appointment reminders
• Respond to your inquiries and provide customer support
• Monitor and analyze usage trends to improve the user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

4. Data Storage & Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure cloud storage with access controls, and regular security assessments.

Documents and files are stored in encrypted cloud storage (Amazon S3) with role-based access controls. Passwords are hashed using bcrypt and are never stored in plain text.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Within your firm: Data is shared among authorized users within the same firm based on role-based permissions
• With your clients: Documents and invoices you publish to client vaults are accessible to the designated client users
• Payment processors: We share necessary billing information with Stripe to process payments securely
• Service providers: We use trusted third-party services for hosting, email delivery, and analytics
• Legal requirements: We may disclose information when required by law, regulation, or legal process

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Export your data in a portable format
• Opt out of non-essential communications
• Restrict or object to certain processing activities

To exercise any of these rights, please contact us at the email address listed below.

8. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We may also use analytics tools to understand how users interact with the Service. You can manage cookie preferences through your browser settings.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

[email protected]