Privacy Policy

1. Information We Collect

When you visit theflexfinance.com or submit our 20-Minute CPA Tax & Cash Flow Audit scheduling form, we collect the contact details and business context you provide voluntarily:

• Contact Identity: Full name, professional corporate email address, and direct telephone number.
• Business Financial Context: Legal company name, estimated annual operating revenue tier, current accounting software (such as QuickBooks Online or Xero), and active merchant payment gateways (such as Stripe, Shopify Payments, PayPal, or Payoneer).
• Operational Inquiries: Any optional notes regarding month-end close bottlenecks or historical bookkeeping backlogs.

2. CRM Storage & Lead Processing

Inquiry data submitted through our website forms is transmitted via secure HTTPS encryption directly to our private ERPNext CRM infrastructure (api.theflexfinance.com) and mirrored to our client operations desk at info@theflexfinance.com. We do not sell, rent, monetize, or trade your contact details or financial metrics to third-party data brokers or marketing affiliates.

3. Client Application, Plaid & Payment Gateway Tokens

When clients onboard to our FlexBooks client application (app.theflexfinance.com), financial connections are governed by strict zero-custody, view-only authentication:

• Bank Feeds (Plaid / Native Bank OAuth): We connect exclusively via secure, restricted read-only tokens. The Flex Finance never views, logs, or stores your banking passwords, multi-factor authentication codes, or debit card PINs.
• Payment Gateways (Stripe, Shopify, PayPal): We utilize restricted read-only API keys or accountant-level collaborator seats to ingest transaction batches, fee line items, chargebacks, and payouts.
• Zero Fund Custody: Our operators, CPAs, and AI automation engines have zero capability or authorization to initiate cash disbursements, transfer funds, issue withdrawals, or alter banking routing profiles.

4. Web Analytics (Google Analytics 4)

We utilize Google Analytics 4 (Measurement ID: G-EHTW9K4GC0) to evaluate aggregated website performance, visitor paths, and conversion metrics. GA4 collects pseudonymized device information, browser types, and approximate geographic regions without storing individual IP addresses. You may disable tracking cookies through your browser settings or opt out using standard browser privacy controls.

5. Data Retention & Security Standards

Corporate tax records, general ledger archives, and reconciliation reports are retained in compliance with federal and state CPA record-retention statutes (typically 7 years for corporate tax filings). All database backups utilize AES-256 encryption at rest and TLS 1.3 encryption in transit across private virtual servers with automated 3-2-1 cloud redundancy.

6. Your Rights & Data Removal

You have the right to request access to the personal data we maintain about you, request corrections to erroneous records, or request the deletion of marketing contact details. To submit an inquiry or exercise your privacy rights under applicable state laws, please contact our data compliance coordinator.