Last updated 23 September 2026. DRAFT — not yet reviewed by a lawyer.
Flowcatch is operated by [YOUR TRADING NAME], [ABN], of New South Wales, Australia. Contact: hello@flowcatch.app.
When you connect Xero, you grant us read-only access to three things: sales invoices and credit notes, contacts, and your organisation's basic settings (name, time zone, base currency). We cannot create, change or delete anything in your Xero account, and we never request access to bank feeds, payroll or bills.
We do not store invoice line items, payments, bank details, or anything about your suppliers or employees.
We calculate, for your business alone, how often each of your customers usually orders and how much they usually spend, and we email you the customers who have stopped or slowed down. Every calculation uses only your own data.
We do not use your data to train machine learning models, and we do not pool or compare data across businesses. The statistics behind your alerts are computed from your invoices only.
We do not sell data, share it with advertisers, or give it to anyone else except where the law requires it.
While your account is active. If you disconnect Xero, or if you stop paying and do not return, we delete your business data within 30 days. You can delete everything immediately yourself at any time from your dashboard — see Disconnect and delete.
Xero access tokens are encrypted before being stored. All traffic uses HTTPS. Access to the production system is limited to the operator of this service.
You may ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@flowcatch.app. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you are in the UK or EU, you also have rights under the UK GDPR or GDPR, including the right to complain to your local supervisory authority.
If we change this policy in a way that affects how we use your data, we will email you before the change takes effect.