This policy explains how Finflo collects, uses, stores, and protects your personal information when you use our document processing service.
Last updated: December 2025
Finflo ("we", "our", or "us") operates the Finflo document processing platform available at app.finflo.au (the "Service"). This Privacy Policy describes how we collect, use, and share information about you when you use our Service.
By using Finflo, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.
Finflo is based in Australia and we are committed to complying with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), as well as the General Data Protection Regulation (GDPR) for users in the European Economic Area.
We collect information you directly provide to us, including:
When you use our Service, we automatically collect certain information:
The documents you upload may contain personal information about third parties (such as customer data, employee records, or financial information). You are responsible for ensuring you have the right to upload such documents and that doing so complies with applicable privacy laws.
We use the information we collect to:
We share your information only in the following circumstances:
We use trusted third-party service providers to operate our Service. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect it.
| Provider | Purpose | Data Shared |
|---|---|---|
| Render | Application hosting & database | All application data |
| Google Cloud | File storage & AI processing | Uploaded documents, extracted data |
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:
If your information needs to be shared for any other reasons, we will reach out for your explicit consent before complying with the request.
We take the security of your data seriously and implement appropriate technical and organisational measures to protect it.
For more details about our security practices, please see our Security page.
We take the protection of your data seriously and follow industry-standard practices to safeguard it. While no online service can guarantee absolute security, we are committed to transparency and will promptly notify affected users if a security incident were ever to occur.
We retain your information for as long as necessary to provide our Service and fulfil the purposes described in this policy.
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Uploaded documents | Until you delete them or your account |
| Templates | Until you delete them or your account |
| Extraction results | Until you delete them or your account |
| Server logs | 30 days |
| Database backups | 7 days (rolling) |
When you delete data or your account, we will remove your information from our active systems. Some information may persist in backups for a limited period before being permanently deleted.
Depending on your location, you may have certain rights regarding your personal information. We are committed to honouring these rights for all users.
You can access most of your data directly through the application. For a complete copy of all data we hold about you, contact us at privacy@finflo.au.
You can export your extraction results to Excel format directly from the application. For a machine-readable export of all your data, contact us.
You can delete individual documents, templates, and extractions within the app. To delete your entire account and all associated data, contact us at support@finflo.au.
You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us.
If you believe we have not handled your information correctly, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.
To exercise any of these rights, please contact us at privacy@finflo.au. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.
Finflo is based in Australia, and our primary infrastructure is located in Australia and the APAC region.
If you are accessing our Service from outside these regions, please be aware that your information may be transferred to, stored, and processed in countries that may have different data protection laws than your country of residence.
When we transfer data internationally, we rely on:
Finflo is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18.
If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we may have information from or about a child under 18, please contact us at privacy@finflo.au.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make changes:
Your continued use of the Service after any changes indicates your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related enquiries within 30 days.