Privacy Policy

The information we collect depends on how you use FlowRadar AI.

A. Account and profile information

When you create or manage an account, we may collect:

• Your name
• Email address
• Authentication and account status
• Business type or account-use preferences
• Subscription plan and trial status
• Notification and email preferences
• Onboarding status
• Support-request history

Authentication credentials are processed through our authentication provider. We do not have access to your password in readable, plaintext form.

If you sign in through Google or another supported identity provider, we may receive basic profile information authorized by you, such as your name, email address, and account identifier.

B. Financial account information

When you choose to connect an institution through Plaid, we may receive financial information made available for the accounts you authorize, such as:

• Financial institution name
• Account name and type
• Masked account identifier
• Account balance information
• Transaction dates, amounts, merchants, descriptions, and categories
• Recurring transaction information
• Income and cash-flow patterns
• Account and connection status
• Data needed to identify duplicate, unusual, or changing financial activity

The specific information available depends on the financial institution, the accounts you select, and the Plaid products enabled by FlowRadar AI.

FlowRadar AI is intended to use read-only financial information. We do not use Plaid to initiate transfers, withdrawals, purchases, or payments unless a future feature is separately disclosed and authorized. FlowRadar AI does not intentionally request full bank-account or routing numbers for its financial-monitoring features.

C. Financial connection tokens

After you authorize a connection, FlowRadar AI may receive and securely store identifiers and connection tokens that allow our server to request authorized financial information from Plaid. These tokens are not your online banking username or password and are not exposed in browser code, URLs, logs, analytics, email, or client-side storage.

D. Usage and technical information

We may automatically collect limited technical and usage information, such as:

• IP address
• Browser type and version
• Device and operating-system type
• General geographic region derived from an IP address
• Referring page
• Pages and features used
• Login, onboarding, and connection events
• Error, performance, and security events
• Dates and times of activity

We do not include transaction descriptions, balances, Plaid access tokens, account identifiers, or other sensitive financial information in analytics events.

E. Communications and support information

When you contact us or submit a support request, we may collect:

• Name and email address
• Support category and subject
• The content of your request
• Safe diagnostic information
• Correspondence and resolution history

Please do not submit passwords, Social Security numbers, complete account numbers, complete payment-card numbers, financial-login credentials, or security codes through support forms or email.

F. Subscription and payment information

When you start a paid subscription, Stripe may collect payment-card and billing information. FlowRadar AI receives only limited payment and subscription records needed to administer the account, such as payment status, plan, renewal date, and processor customer identifier. FlowRadar AI does not store complete payment-card numbers or card security codes.

We may collect information:

• Directly from you
• Automatically from your browser or device
• From Plaid and financial institutions you authorize
• From authentication providers such as Google
• From service providers supporting hosting, email, security, support, and payments
• From fraud-prevention and security systems
• At your direction or with your consent

We may use information to:

• Create, authenticate, and maintain your account
• Connect financial institutions that you authorize
• Import and organize authorized financial information
• Identify recurring charges, duplicate transactions, spending changes, income deviations, and other activity that may deserve attention
• Generate personalized dashboards, alerts, summaries, and financial insights
• Maintain and repair financial connections
• Provide customer support
• Send account, security, onboarding, alert, billing, and service communications
• Process subscriptions and payments
• Remember user preferences
• Protect FlowRadar AI, users, and service providers from misuse, fraud, and security threats
• Debug, monitor, maintain, and improve the application
• Comply with applicable legal, contractual, and regulatory requirements
• Enforce our terms and protect legal rights

We limit collection and use of financial data to purposes associated with providing, securing, supporting, and improving the FlowRadar AI services requested by the user.

FlowRadar AI uses Plaid to help users connect eligible bank, credit-union, and credit-card accounts.

Plaid Link manages the institution-selection, authentication, authorization, and account-selection experience. Depending on the institution, Plaid may direct you to your financial institution's website or application to authenticate. FlowRadar AI does not directly receive or store the online banking credentials that you enter within Plaid Link or your financial institution's authentication page.

Your use of Plaid is also governed by Plaid's End User Privacy Policy and applicable end-user terms.

You choose whether to connect an institution and which eligible accounts to share. Connecting a financial institution is not required merely to create a FlowRadar AI account, although financial-monitoring features will be limited until an institution is connected.

You may disconnect an institution through FlowRadar AI from the connection-management controls in Settings. Disconnecting stops FlowRadar AI from requesting new information for that connection. Plaid may separately retain or delete information according to Plaid's own policies and legal obligations. Users may also use Plaid Portal, where available, to review and manage certain Plaid-powered connections.

FlowRadar AI uses automated models, rules, and statistical methods to evaluate authorized financial information and identify patterns or changes that may deserve attention. These systems may analyze factors such as transaction frequency, transaction amount, merchant or category, recurring activity, historical spending patterns, income patterns, and timing and account behavior.

FlowRadar AI alerts are informational and may be incomplete, delayed, or inaccurate. FlowRadar AI does not guarantee detection of every fraudulent, unauthorized, duplicate, or incorrect transaction.

FlowRadar AI is not a financial institution, credit-reporting agency, financial advisor, accountant, attorney, or fraud-prevention guarantee. Users should independently review alerts and contact their financial institution when they suspect unauthorized or incorrect activity.

FlowRadar AI does not use its financial-monitoring alerts to make lending, credit, employment, housing, insurance, or similar eligibility decisions.

Service providers

We may use providers that perform services on our behalf, including:

• Plaid for financial-data connectivity
• Lovable Cloud and Supabase-backed services for application hosting, authentication, databases, storage, and server functions
• Cloudflare for DNS, network security, traffic delivery, and email routing
• Resend for transactional and onboarding email delivery
• Google when users choose Google authentication
• Payment processors when paid subscriptions are enabled

These providers may process information only as needed to provide their contracted services and subject to their own terms and privacy obligations.

Financial institutions and Plaid

Information may be exchanged with Plaid and the financial institutions you authorize to establish, maintain, troubleshoot, or disconnect a financial connection.

Legal and safety purposes

We may disclose information when we reasonably believe it is necessary to comply with law, regulation, subpoena, court order, or legal process; protect the rights, safety, privacy, or property of users, FlowRadar AI, or others; investigate fraud, security incidents, abuse, or violations of our agreements; or establish, exercise, or defend legal claims.

Business transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to applicable legal requirements.

At your direction

We may disclose information when you direct us to do so or provide consent.

FlowRadar AI does not sell or rent users' personal or financial information. FlowRadar AI does not disclose financial-account information, balances, or transaction history to third parties for their independent advertising purposes.

If future practices materially change, this policy and any legally required privacy choices will be updated before the change takes effect.

FlowRadar AI may use essential cookies, session storage, or similar technologies for authentication and session management, security, user preferences, application functionality, and fraud and abuse prevention.

FlowRadar AI currently uses only essential operational telemetry (such as error, performance, and security logging). If an external analytics provider is enabled in the future, this policy will be updated to identify that provider, and any analytics will be configured to avoid transmitting financial-account data, transaction details, account identifiers, or other sensitive financial information.

If nonessential analytics or advertising cookies are enabled in a jurisdiction requiring consent, they will not be loaded until you have provided the required choice.

We retain information only for as long as reasonably necessary to provide and maintain FlowRadar AI, fulfill the purposes described in this policy, maintain security and prevent abuse, resolve disputes, enforce agreements, and meet legal, accounting, and regulatory requirements.

Financial information may be retained while an account or authorized connection remains active.

When a user disconnects an institution, FlowRadar AI stops requesting new information through that connection. Previously retrieved information may remain temporarily until it is deleted in accordance with the implemented retention process.

When a user requests account deletion, FlowRadar AI will delete or de-identify personal information within a reasonable period, subject to information that must be retained for legal, security, fraud-prevention, dispute-resolution, or backup purposes. Residual information may remain in encrypted backups until those backups are overwritten through the normal retention cycle.

FlowRadar AI uses reasonable administrative, technical, and organizational safeguards designed to protect personal and financial information. Safeguards may include:

• Encryption of information in transit
• Encryption of stored data through managed infrastructure
• Authentication and role-based authorization
• Database Row Level Security
• Server-side credential and secret storage
• Restricted administrative access
• Logging and monitoring
• Secure development and change-management practices
• Vendor and service-provider controls

No internet transmission or storage system can be guaranteed completely secure. Please use a unique password, protect your devices, and promptly notify security@flowradarai.com of suspected unauthorized access.

Depending on your location and applicable law, you may have the right to:

• Access personal information we maintain about you
• Correct inaccurate personal information
• Request deletion of personal information
• Request a portable copy of certain information
• Withdraw consent where processing depends on consent
• Disconnect a financial institution
• Opt out of optional onboarding or promotional emails
• Appeal the denial of a qualifying privacy request
• Receive equal service without unlawful discrimination for exercising privacy rights

Users may update certain profile and notification preferences within FlowRadar AI. Marketing and optional onboarding emails contain an unsubscribe or preference-management link. Unsubscribing from promotional messages does not prevent necessary account, security, billing, authentication, or service communications.

To submit a privacy request, contact privacy@flowradarai.com. We may need to verify the requester's identity before fulfilling a request. Authorized-agent requests will be handled as required by applicable law.

Residents of certain U.S. states may have additional rights concerning access, correction, deletion, portability, or certain disclosures of personal information.

FlowRadar AI does not sell personal information and does not use users' financial-account data for cross-context behavioral advertising. Where applicable, FlowRadar AI will honor legally recognized privacy preference signals and provide any additional notices or choices required by law.

Some browsers transmit “Do Not Track” signals. Because there is not a uniform industry standard governing these signals, FlowRadar AI does not currently respond to traditional Do Not Track signals. Where legally required, FlowRadar AI will honor recognized opt-out preference signals such as Global Privacy Control for practices subject to those signals.

FlowRadar AI is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18. If we learn that information was collected from a child contrary to this policy, we will take appropriate steps to delete it.

FlowRadar AI is operated from the United States. Information may be processed and stored in the United States and other locations where our service providers operate. Users accessing the service from outside the United States understand that data-protection laws may differ from those in their location.

We may update this Privacy Policy as FlowRadar AI, applicable law, or our service providers change. We will update the “Last Updated” date when revisions are made. When changes are material, we will provide additional notice through the application, email, or another appropriate method before the changes take effect when required.

For privacy requests or questions:

privacy@flowradarai.com

For security concerns or vulnerability reports:

security@flowradarai.com

For general support:

support@flowradarai.com

FlowRadar AI
Operated by: Just Right Properties
United States