privacy policy

the short version

invoiceflo exists to move invoices from your inbox into your accounting software. we read what we need to do that job, store as little as possible, and never sell or rent your data to anyone. flo works for you, not for advertisers.

what we collect

• account details — your name and email, via our sign-in provider (clerk), so you can log in.
• email content flo needs — with your permission, flo reads your connected gmail inbox with a read-only scope to find invoice-like messages and their attachments. messages that aren't invoice-like are ignored.
• invoice data — vendor, dates, amounts, tax and the source document, so flo can file them to xero and show you an audit trail.
• chat history — your conversations with flo, so the thread works like a thread. you can wipe it any time from settings.
• connection tokens — oauth tokens for gmail and xero, stored encrypted, used only to do the work you connected them for.

what we never do

• sell or rent your data — to anyone, for anything.
• send, delete or modify your email. flo's gmail access is read-only.
• use your books or email to train third-party ai models.
• show you ads, or build profiles for anyone who does.

who we share with

only the services that make invoiceflo work: our hosting provider, our sign-in provider (clerk), and the ai provider that powers extraction and chat (anthropic) — each receiving only what they need to provide their service. and of course xero, when flo files an invoice — that's the point.

where your data lives, and for how long

data is encrypted in transit and at rest. invoice records and chat history are kept while your account is active so flo can spot duplicates and keep context. wipe your chat any time; disconnect an inbox and flo stops reading it immediately; delete your account and we delete the data we hold about it.

your controls

• disconnect gmail or xero from settings at any time.
• revoke invoiceflo's access from your google or xero account directly.
• wipe your chat history with one click in settings.
• email [email protected] to export or delete your data.

changes

if this policy changes in a way that matters, we'll tell you in the app before it takes effect — not bury it in a footer. questions? [email protected].