Effective Date: March 5, 2026 · Last Updated: September 28, 2026
The short version: DeductFlow keeps a working copy of your data on your device and securely backs it up to our servers so you never lose it and can use it across devices. Your data is encrypted in transit and at rest, isolated to your account, and never sold or shared with advertisers. We collect minimal analytics to improve the product, and our public marketing pages (not the app) use the Meta pixel to measure and target our ads, which you can decline.
We collect different types of information depending on how you interact with DeductFlow:
When you use the DeductFlow app, you may enter financial and operational data including expenses, income, mileage, active hours, property details, and other information related to your short-term rental business. This data is stored on your device for fast, offline access and is securely synced to our servers (hosted on Supabase) so it is backed up and available across your devices. It is encrypted in transit and at rest and is isolated to your account. We access it only to provide and support the service (for example, to sync, back up, or restore your data, or to help you with a support request) -- never to sell it or share it with advertisers.
Please avoid uploading documents that contain sensitive personal information you don't need for your records -- such as Social Security numbers, full bank or card numbers, or government IDs. DeductFlow is built for expense and receipt records.
| Data Type | Where It's Stored | Who Can Access It |
|---|---|---|
| Expenses, income, mileage, time entries | Your device + our servers (encrypted, backed up) | You; DeductFlow staff only as needed to operate or support the service |
| Property details and settings | Your device + our servers (encrypted) | You; DeductFlow staff as above |
| Receipt images you upload | Our secure storage (private, per-account) | You; DeductFlow staff as above |
| Plan status (free/pro) | Our servers | You |
When you visit our website (deductflow.com), we may collect:
We do not use this data to access your financial records, and none of your financial records are sent to Meta.
If you purchase a Pro subscription, payment is processed entirely by Stripe, a PCI-compliant third-party payment processor. We do not collect, store, or have access to your credit card numbers, bank account details, or other payment credentials. Please review Stripe's Privacy Policy for information on how they handle your payment data.
If you voluntarily provide your email address (for example, through a newsletter signup, waitlist, or support request), we collect and store it for the purpose of communicating with you. You can unsubscribe from emails at any time.
We do not: sell your financial records or account data, share your financial data with advertisers, access your data except as needed to operate, support, secure, or improve the service, use your data for automated decision-making or profiling, or share your email with third parties for marketing.
Storage model. DeductFlow keeps a working copy of your data on your device for speed and offline use, and securely syncs it to our servers (Supabase) for backup and multi-device access. This means:
We restrict internal access to what's needed to run and support the service, and we maintain administrative and technical safeguards to protect your data.
DeductFlow uses essential browser storage to keep the service working. The marketing site and app also use analytics cookies to understand traffic and improve the product. Our public marketing pages also use the Meta pixel, an advertising cookie and retargeting pixel, to measure and target our ads on Facebook and Instagram. You can decline or withdraw both at any time.
DeductFlow integrates with or links to the following third-party services:
Each third-party service has its own privacy policy governing its handling of your data.
DeductFlow is not intended for use by individuals under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, contact us at privacy@deductflow.com.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. We do not sell your financial records or account data for money. The Meta pixel on our public pages shares browsing data with Meta for cross-context behavioral advertising, which California law treats as "sharing." To opt out of that sharing, choose Decline under "Review analytics and advertising choice" in Section 5, or browse with Global Privacy Control turned on; we honor that signal as an opt-out.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related questions or concerns: