Privacy Policy

Last updated: January 9, 2025

1. Introduction

CapitalCurve ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cashflow forecasting service.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Company name and business details
  • Billing information (processed by our payment provider)

Financial Data

When you connect your accounting software (Xero, QuickBooks, MYOB), we access:

  • Chart of accounts and account balances
  • Invoices and bills (amounts, dates, contacts)
  • Bank account information for forecasting
  • Contact/customer/vendor information

We only access data necessary to provide our forecasting service. We do not access or store sensitive information like bank login credentials.

Usage Data

We automatically collect certain information when you use our Service, including:

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Usage patterns and feature interactions

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our Service
  • Generate cashflow forecasts and analytics
  • Process transactions and send billing information
  • Send service updates and notifications
  • Respond to customer support requests
  • Improve and optimize our Service
  • Detect and prevent fraud or abuse

4. Data Sharing and Disclosure

We do not sell your personal or financial data. We may share information with:

  • Service Providers: Third parties that help us operate our Service (hosting, analytics, payment processing)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate security measures to protect your data, including:

  • Encryption in transit (TLS/SSL) and at rest
  • Secure authentication and access controls
  • Regular security audits and monitoring
  • Data hosted on SOC 2 compliant infrastructure

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your data within 30 days, unless retention is required by law.

7. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data
  • Opt out of marketing communications
  • Withdraw consent

To exercise these rights, contact us at support@capitalcurve.io.

8. Third-Party Integrations

Our Service integrates with third-party accounting platforms (Xero, QuickBooks, MYOB). Your use of these integrations is subject to their respective privacy policies. We only access data you authorize through their OAuth consent flows.

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in
  • Remember your preferences
  • Analyze usage patterns

You can control cookies through your browser settings.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@capitalcurve.io