Legal

Privacy Policy

Effective: April 2026 · Version 1.0 · flocast.net

🔒 The short version

We connect to your bank read-only via Plaid — we can never move money.
We never sell your data. Not to anyone. Ever.
Your financial data is encrypted in transit and at rest.
You can delete your account and all your data anytime.
We only collect data we need to provide the service.
Section 01

Who We Are

Flocast ("Flocast," "we," "us," or "our") is a financial technology company that provides AI-powered cash flow forecasting software for small businesses. Our service is available at flocast.net.

This Privacy Policy describes how Flocast collects, uses, shares, and protects information about you when you use our application and services. By creating an account or using Flocast, you agree to this Privacy Policy.

For questions about this Policy or your data, contact us at support@flocast.net.

Section 02

Information We Collect

Account Information

When you create an account, we collect your name, email address, business name, and a hashed (never plaintext) password. This is required to create and secure your account.

Financial Data via Plaid

When you connect your bank account, Flocast uses Plaid to access your bank data with read-only access. We receive and store:

Flocast does not store your bank login credentials, full account numbers, or routing numbers. Plaid handles authentication with your bank directly.

Data You Enter Directly

Payment Information

Subscription payments are processed by Stripe. Flocast stores only your Stripe customer ID and subscription status. We never see, store, or handle your credit card number, expiration date, or CVV — those are handled exclusively by Stripe.

Usage and Technical Data

We collect anonymized usage data such as which features are used and error logs. This data does not include your financial information and is used solely to improve the service.

Section 03

How We Use Your Information

We use the information we collect only to provide and improve Flocast. Specifically:

We do not use your financial data for advertising, profiling for third parties, or any purpose beyond delivering the Flocast service.

Section 04

How We Share Your Information

We do not sell your personal information. We share data only with the following service providers, strictly to operate the Flocast service:

Provider Purpose Data Shared
Plaid Bank connectivity Bank connection tokens (read-only)
Stripe Payment processing Name, email, subscription status
Anthropic AI assistant (Claude) Financial context you share in chat
Neon Database hosting All stored user data (encrypted)
Netlify Application hosting Application traffic (no financial data)
Resend Transactional email Name, email address

We may also disclose information if required by law, court order, or to protect the rights and safety of Flocast or its users. We will notify you of any such disclosure where legally permitted to do so.

Section 05

How We Protect Your Data

While we implement strong security measures, no system is completely immune to security risks. We encourage you to use a strong, unique password for your Flocast account.

Section 06

Your Rights and Choices

You have the following rights with respect to your data. To exercise any of these rights, contact us at support@flocast.net. We will respond within 30 days.

👁 Right to Access
Request a copy of all personal data we hold about you.
🗑 Right to Deletion
Request deletion of your account and all associated data.
📦 Right to Portability
Request an export of your data in JSON or CSV format.
✏️ Right to Correct
Update or correct inaccurate account information at any time.
🔌 Right to Disconnect
Disconnect your bank account at any time from the Connect tab.
❌ Right to Opt Out
Opt out of non-essential communications at any time.

Account Deletion

When you delete your account, we permanently delete all your data from our systems within 30 days, including transaction history, invoice records, bank connection tokens, and account information. We retain only the minimum records required by law, such as payment records for tax purposes.

Section 07

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

To submit a CCPA request, contact us at support@flocast.net with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

Section 08

Cookies and Local Storage

Flocast uses browser local storage to store your authentication token so you remain logged in between sessions. We do not use third-party tracking cookies or advertising cookies. We do not use analytics services that track you across other websites.

You can clear your local storage at any time through your browser settings, which will log you out of Flocast.

Section 09

Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow you to reactivate, after which it is scheduled for deletion. If you explicitly request account deletion, all data is purged within 30 days.

Transaction data pulled from Plaid covers up to 90 days of history and is refreshed each time you sync. We do not retain transaction data beyond what is necessary to provide your forecast and expense history.

Section 10

Children's Privacy

Flocast is a business financial tool intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe we have collected such information, please contact us at support@flocast.net.

Section 11

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email to the address on your account and update the "Effective" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of Flocast after changes become effective constitutes your acceptance of the updated Policy.

Section 12

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

Flocast Privacy Team

We typically respond within 2 business days. For data deletion or export requests, please include "Data Request" in your subject line.

✉ support@flocast.net