Privacy Policy
Last updated: April 12, 2026
NoteFlow ("we", "us", or "our") provides financial statement preparation software for accounting professionals. This Privacy Policy explains how we collect, use, store, and protect information when you use our service.
1. Information We Collect
Account Information
When you create an account, we collect your email address, name, and authentication credentials. If you upgrade to a paid plan, we collect billing information through our payment processor (Stripe). NoteFlow never stores your full credit card number.
Project Data
When you use NoteFlow, you upload trial balance data, account names, amounts, and disclosure narratives. This data is stored securely in our cloud infrastructure and is encrypted at rest.
Usage Data
We collect basic usage analytics — login counts, statements generated, and exports performed — to improve the service. We do not track individual user behavior beyond what is necessary for the service to function.
2. How We Use Your Information
- To provide the financial statement preparation service you request
- To authenticate you and protect your account
- To process payments and manage subscriptions
- To send service-related notifications (e.g., workflow updates, password resets)
- To improve the service and fix bugs
- To comply with legal obligations
3. Data Storage and Security
Your data is stored in Google Cloud (Firebase) infrastructure, which provides enterprise-grade security including encryption in transit and at rest. We implement reasonable administrative, technical, and physical safeguards to protect your information.
However, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
4. Data Sharing
We do not sell your personal information or project data. We share information only with the following service providers, who are contractually bound to keep it confidential:
- Google Firebase — Authentication, database hosting
- Stripe — Payment processing
- Resend — Transactional email delivery
- Anthropic — AI text rewriting (only when you opt in to AI Rewrite)
We may also disclose information if required by law, court order, or to protect the rights, property, or safety of NoteFlow, our users, or others.
5. Your Rights
You have the right to:
- Access your data — you can export your projects at any time via the Export feature
- Correct inaccurate data — edit your account or project data directly in the app
- Delete your account — contact us at getnoteflowapp@gmail.com to request deletion
- Cancel your subscription at any time
6. Data Retention
We retain your account and project data for as long as your account is active. If you delete your account, we will delete your project data within 30 days, except where retention is required by law (e.g., tax records).
7. Cookies and Local Storage
NoteFlow uses browser local storage to cache project data for offline access and improve performance. We do not use third-party tracking cookies. We use authentication cookies (managed by Firebase) to keep you signed in.
8. Children's Privacy
NoteFlow is not intended for use by anyone under 18. We do not knowingly collect information from children.
9. International Users
NoteFlow is operated from the United States. If you access the service from outside the U.S., your information will be transferred to and processed in the U.S.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top of this page reflects the latest revision.
11. Contact
For questions about this Privacy Policy or your data, contact us at getnoteflowapp@gmail.com.