Privacy Policy

1. Introduction

Welcome to CashFish. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website or use our services and tell you about your privacy rights and how the law protects you.

CashFish is a financial operating system that connects financial documents, bookkeeping, expenses, invoices, CRM, revenue and cash-flow insight in one platform. We take the security and privacy of your financial data seriously.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you:

• Identity Data: First name, last name, username, business name
• Contact Data: Email address, telephone number, billing address
• Financial Data: Bank account details, payment card details, transaction data
• Transaction Data: Details about payments to and from you and other details of services you have purchased from us
• Connected Source Data: Financial documents and related information from sources you choose to connect — such as receipts, invoices, bills, statements, contracts and proposals found in connected email accounts, and records from payment, commerce, CRM or storage integrations you authorize
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use our website and services
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences

3. Connected Email Accounts & Google User Data

When you connect an email account (such as Gmail, Outlook, or another mailbox via IMAP), CashFish requests read-only access. We use that access to detect and extract financial documents — receipts, invoices, bills, statements, contracts and proposals — and to build the contact and activity records that support your workspace. CashFish does not send, delete, label or modify anything in your mailbox.

Extracted records are held for your review: you can approve, correct or dismiss them before they become part of your financial records. You can disconnect any email account at any time from your CashFish connection settings, and for Google accounts also from your Google Account security settings.

CashFish's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide and maintain our service, including financial analysis and insights
• To extract, organize and categorize financial documents from sources you connect, subject to your review and approval
• To process your payments and manage your account
• To notify you about changes to our service
• To provide customer support and respond to your requests
• To improve our service through analytics and user feedback
• To send you marketing communications (with your consent)
• To comply with legal obligations

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. Our security measures include:

• End-to-end encryption for all financial data
• Secure SSL/TLS connections
• Read-only access for connected email and bank sources
• Regular security audits and penetration testing
• Multi-factor authentication
• Compliance with industry standards (SOC 2, ISO 27001)

6. Data Retention & Deletion

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation.

You can export your data at any time, and we will delete your data upon account closure, subject to legal retention requirements.

7. Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Right to access your personal data
• Right to correction of inaccurate data
• Right to erasure of your personal data
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

How to exercise these rights: email privacy@cashfish.io, or use the export and privacy options in your account settings.

8. Third-Party Services

We may share your data with trusted third-party service providers who assist us in operating our platform:

• Banking and payment integration partners (Plaid, Stripe)
• Cloud infrastructure providers (AWS, Google Cloud)
• Analytics services (anonymized data only)
• Email communication services (Resend)
• Integrations you choose to connect (for example email, commerce, CRM or storage providers), which operate under their own terms and privacy policies

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

9. Cookies & Analytics

Our website uses essential cookies needed for the site to function, and analytics that help us understand how the product is used. Analytics data shared with providers is anonymized. You can control cookies through your browser settings.

10. International Transfers

Your data may be transferred to, and maintained on, computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal data, please contact us.

12. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this document or wish to exercise your rights, please contact us: