1. Who we are
This Privacy Policy explains how CashFlow MFG ("we", "us", "our") — the developer of the CashFlow MFG mobile & web app for manufacturing business accounting, invoicing, GST and production management — collects, uses, stores and deletes your information.
By creating an account or using the app, you agree to the practices described in this policy. We only collect the data needed to run the service you asked for.
2. What we collect
We collect only the data you provide or that is generated by your use of the app:
| Category | What it includes |
|---|---|
| Account information | Email address (used to log in via one-time password), optional name. |
| Business information | Business name, address, GSTIN, logo and signature images you upload, and settings. |
| Financial data | Transactions (income/expense), invoices and customers, GST returns, receivables/payables, cash-flow and production data, bank account details (bank name and last 4 digits only), UPI payment records. |
| Team & advisor data | Email addresses of team members you invite, and of Chartered Accountants you connect with. |
| Device & usage data | Standard analytics (e.g. Firebase Analytics) — app usage, device type and identifiers, crash reports if crash reporting is enabled. |
| Sign-in method | If you choose Google Sign-In, your Google email and profile name (we do not store your Google password). |
We do not collect your location, contacts, SMS, or full card numbers. Card payments are processed by our payment partner (Razorpay) and their details are governed by Razorpay's own privacy policy.
3. How we use your data
- To provide the service: invoicing, GST returns, accounting, production & inventory management, reports and exports.
- To authenticate you and keep your account secure (including optional two-factor authentication).
- To send you transactional emails (OTPs, invoice emails to your customers).
- To process subscription payments you choose to make.
- To improve the app using anonymised usage analytics.
- To comply with legal obligations (for example, Indian tax/GST record-keeping laws).
4. How we share data
We never sell your personal data. We share it only with the service providers needed to run the app:
- Hosting & database — Render (server hosting) and PostgreSQL (data storage).
- Email delivery — Resend (transactional emails, OTPs, invoice emails).
- Analytics & sign-in — Firebase (analytics and optional Google Sign-In).
- Payments — Razorpay, only when you purchase a subscription; card details never pass through our servers.
When you send an invoice from the app, the invoice (with your business details) is emailed to your customer, which you authorise.
5. Data security
We protect your data with:
- Encryption in transit — all traffic uses HTTPS/TLS.
- Encryption at rest — sensitive fields are encrypted with a dedicated encryption key.
- Access controls — role-based permissions for owners and team members; authentication and rate limiting on APIs.
- Minimal storage — we store only what the service requires.
6. Retention & deletion
Your data is kept while your account is active. You can delete your account and all associated data at any time:
- In the app: Settings → Delete Account (type "DELETE" to confirm).
- On the web: visit our account deletion page — no need to reinstall the app.
Deletion is permanent and removes your businesses, transactions, invoices, inventory, production data and personal details. A small amount of data may be retained where required by law (for example, tax records that must be kept for the period mandated by Indian law) or for security/fraud prevention; retained data is no longer used for any other purpose.
7. Your rights
- Access and export your data from within the app.
- Correct or update your business information.
- Enable or disable two-factor authentication.
- Delete your account and data as described above.
8. Children
The app is intended for business use by adults and is not directed at children. We do not knowingly collect data from children under 18.
9. Changes to this policy
We may update this policy from time to time. We will notify you of material changes in the app. The "Last updated" date above shows when it was last revised.
10. Contact us
Questions about this policy or your data? Contact us at: cashflowmfg@gmail.com