Legal Documents

1 Terms of Service

1.1 Eligibility

You must be at least 18 years of age to use BillFlow. By using the Service, you represent and warrant that you are 18 years of age or older and have the legal capacity to enter into a binding agreement. If you are using the Service on behalf of a family unit, you are responsible for ensuring all members comply with these Terms.

1.2 Account Registration

To access BillFlow, you must create an account by providing accurate and complete information. You are responsible for:

• Maintaining the confidentiality of your account credentials
• All activities that occur under your account
• Notifying us immediately of any unauthorized use at support@thebillflow.com
• Ensuring your contact information remains current and accurate

1.3 Acceptable Use

You agree to use BillFlow only for lawful personal financial management purposes. You agree NOT to:

• Use the Service for any unlawful purpose or in violation of any local, state, national, or international law
• Attempt to gain unauthorized access to any portion of the Service or its related systems
• Transmit any harmful, offensive, or disruptive content
• Reverse engineer, decompile, or disassemble any part of the Service
• Use the Service to store or transmit malicious code
• Share your account credentials with unauthorized third parties
• Misrepresent your identity or affiliation

1.4 Service Availability

We strive to maintain 99% uptime but do not guarantee uninterrupted access. We reserve the right to modify, suspend, or discontinue the Service at any time with reasonable notice. Planned maintenance will be communicated when possible.

1.5 Modifications to Terms

We reserve the right to modify these Terms at any time. We will provide notice of significant changes via email or in-app notification at least 14 days before changes take effect. Continued use of the Service after such notice constitutes acceptance of the modified Terms.

1.6 AI-Assisted Development

Portions of BillFlow's codebase are developed with the assistance of AI coding tools, working under human direction, review, and testing before any change reaches the live product. This is a normal part of how BillFlow is built and does not change the legal responsibilities set out in these Terms — BillFlow remains fully responsible for the Service regardless of what tools were used to build any part of it. See Section 3.4 for the separate, optional in-app AI assistant feature that uses OpenAI's models to respond to user questions.

2 Privacy Policy

2.1 Information We Collect

Information you provide directly:

• Name, email address, and password (hashed with bcrypt — we never store plaintext passwords)
• Financial data you manually enter: bills, credit card details, loan information, investment positions
• Profile photo (stored securely in our database)
• Family member information you choose to add
• Payment information for subscription (handled entirely by Stripe — we do not store card numbers)

Information collected automatically from Plaid (with your consent):

• Bank account names, types, and balances
• Credit card balances, limits, APR, minimum payments, and due dates
• Investment account balances
• Loan account information
• Transaction history (merchant names, amounts, dates, categories)

Technical information:

• Session tokens (random 32-byte hex strings, stored as hashed values)
• Last login timestamp
• Two-factor authentication status and delivery method

2.2 How We Use Your Information

• To provide, maintain, and improve the BillFlow Service
• To display your financial data across your devices
• To send two-factor authentication codes via email or SMS
• To process subscription payments through Stripe
• To communicate service updates, security alerts, and important notices
• To detect and prevent fraud or unauthorized account access
• To analyze aggregate usage patterns (anonymized) to improve the Service

2.3 How We Do NOT Use Your Information

2.4 Data Sharing

We share your data only with:

• Plaid Technologies, Inc. — to connect your financial institutions (see Section 3)
• Stripe, Inc. — to process subscription payments (see Section 3)
• Google LLC — if you choose to sign in with Google, to verify your identity (see Section 3)
• Resend — to deliver account, billing, and support emails on our behalf (see Section 3)
• OpenAI, L.L.C. — if you use the in-app assistant, to generate its responses (see Section 3)
• National Weather Service (NWS) — if you allow location access for the dashboard weather widget, your coordinates are sent to this U.S. government service to retrieve a forecast; no account or financial data is included in that request, and NWS does not receive any identifying information about you
• Amazon Web Services (AWS) — your data is hosted on AWS infrastructure, including a managed database and isolated, access-controlled storage for uploaded documents (receipts, statements)
• Law enforcement — only when required by valid legal process (court order, subpoena)

2.5 Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your personal data is permanently deleted from our servers within 30 days
• Plaid access tokens are revoked immediately
• Payment history may be retained by Stripe for legal/tax compliance purposes
• Anonymized aggregate data may be retained indefinitely

2.6 Your Rights (CCPA / Privacy Rights)

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Opt out of any data sharing (beyond service providers listed above)
• Receive a copy of your data in a portable format

To exercise these rights, contact us at support@thebillflow.com.

2.7 Cookies and Local Storage

BillFlow stores authenticated financial data on BillFlow's servers and uses browser storage only for limited interface preferences and one-time migration markers. Sensitive account state is not intentionally persisted in browser localStorage. We do not use third-party tracking cookies or advertising cookies.

3 Third-Party Services

3.1 Plaid — Banking & Financial Data Connectivity

Plaid — Scope of Responsibility

• BillFlow stores only the access tokens Plaid provides — never your bank credentials
• Plaid is a separate company with its own security certifications (SOC 2 Type II, PCI DSS Level 1)
• You may revoke Plaid's access at any time at my.plaid.com or by removing connections in BillFlow's Settings → Banks
• Plaid charges BillFlow per connected account — costs are included in your BillFlow subscription
• Plaid's data sharing practices are governed by Plaid's own privacy policy, not BillFlow's
• In the event of a data breach at Plaid, BillFlow will notify affected users as soon as we are informed

3.2 Stripe — Payment Processing

Stripe — Scope of Responsibility

• Stripe is PCI DSS Level 1 certified — the highest level of payment security
• BillFlow only receives a Stripe customer ID and subscription status from Stripe
• Billing disputes and chargebacks are handled directly with Stripe
• You can manage your payment method at any time in Settings → Subscription → Manage

3.3 Amazon Web Services (AWS) — Hosting Infrastructure

AWS — Scope of Responsibility

• All traffic between your browser and BillFlow is encrypted (HTTPS/TLS)
• A web application firewall filters malicious traffic before it reaches the application
• Automated monitoring runs continuously, with alerts on abnormal activity
• Internal administrative access requires its own separate two-factor verification, in addition to a private access credential — a single leaked credential is not enough on its own to reach account data
• AWS holds SOC 1/2/3, ISO 27001, and PCI DSS certifications for its infrastructure — see AWS's own compliance documentation for current details

3.4 OpenAI — AI-Powered Assistant

OpenAI — Scope of Responsibility

• The assistant is informational only — it does not provide financial, tax, or legal advice, and nothing it says should be treated as a substitute for professional guidance
• AI-generated responses can be inaccurate; always verify anything important against your actual account data in the app
• The assistant cannot move money, change settings, or take any action on your account — it can only read a summary and respond in text
• You can decline to use the assistant entirely; it's optional and never required to use BillFlow's core features
• Per OpenAI's API data usage policy, data sent through the API is not used to train OpenAI's models by default

3.5 Google — Sign In With Google

Google — Scope of Responsibility

• Signing in with Google is optional — you can always create a BillFlow account with an email and password instead
• You can review or revoke BillFlow's access to your Google account at any time at myaccount.google.com/permissions

3.6 Resend — Transactional Email Delivery

Resend — Scope of Responsibility

• Resend only sends transactional emails triggered by your own actions in the app (signing in, a receipt, a support ticket you submitted) — never marketing email without separate, explicit opt-in

4 Data Storage & Security

4.1 Security Measures

• Passwords: Hashed using bcrypt with appropriate salt rounds — plaintext passwords are never stored
• Session tokens: Cryptographically random 32-byte hex strings (256-bit entropy)
• IP address & login timestamps: Recorded at each login for security, fraud prevention, and account-recovery purposes
• Two-Factor Authentication: Optional email-based 6-digit OTP with 10-minute expiry
• Transport security: All data transmitted over HTTPS/TLS 1.2 or higher
• Banking credentials: Never stored by BillFlow — handled entirely by Plaid
• Payment data: Never stored by BillFlow — handled entirely by Stripe

4.2 Data Location

All BillFlow data is stored on servers located in the United States. If you are accessing the Service from outside the US, your data will be transferred to and processed in the US.

4.3 Local Storage

BillFlow stores your authenticated financial state on our servers. Browser localStorage is limited to non-sensitive interface preferences such as language, theme, sidebar state, onboarding markers, and consent choices. Eligible legacy browser copies from older BillFlow versions are reconciled with secure server state and removed only after a successful secure load or save.

4.4 Security Incidents

In the event of a data breach that may affect your personal information, we will:

• Notify affected users by email within 72 hours of discovery
• Provide details of what data was affected and what steps we are taking
• Cooperate with applicable authorities as required by law
• Immediately revoke compromised session tokens

4.5 Your Responsibility

• Keep your password strong and unique
• Enable Two-Factor Authentication (Settings → Security)
• Log out of shared devices
• Notify us immediately if you suspect unauthorized access

5 Subscription & Billing

5.1 Plans and Pricing

BillFlow offers subscription plans with the following terms:

• Subscription fees are charged on a monthly or annual basis as selected at signup
• Prices are listed in US Dollars and are subject to applicable taxes
• We reserve the right to change pricing with 30 days notice to existing subscribers
• Existing subscribers will be grandfathered at their current rate for 90 days after any price increase

5.2 Free Trial

New users may receive a free trial period as advertised at the time of signup. No charge will be made until the trial period ends. You may cancel before the trial ends to avoid being charged. We will send a reminder email 3 days before your trial expires.

5.3 Cancellation Policy

• You may cancel your subscription at any time through Settings → Subscription → Cancel Plan
• Cancellation takes effect at the end of your current billing period
• You will retain access to all features until the end of your paid period
• No partial refunds are issued for unused portions of a billing period unless required by law

5.4 Refund Policy

• If you are charged in error, contact us within 7 days for a full refund
• Refunds for other reasons are evaluated on a case-by-case basis
• To request a refund, email support@thebillflow.com with your account email and reason
• All refunds are processed through Stripe and may take 5-10 business days to appear

5.5 Failed Payments

If a payment fails, we will attempt to retry the charge. After 3 failed attempts, your account may be downgraded to a limited access mode. You will receive email notifications for each failed attempt and a final notice before any service interruption.

5.6 Third-Party Costs (Plaid)

6 Disclaimers & Limitation of Liability

6.1 Not Financial Advice

6.2 Data Accuracy

• Financial data synced from Plaid is provided by your financial institutions and may not be real-time
• BillFlow displays data as received from third parties — we do not guarantee its accuracy or completeness
• Always verify important financial information directly with your financial institution
• Sync delays may occur due to Plaid's processing times or your bank's update schedules

6.3 Service "As Is"

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE ERROR-FREE, UNINTERRUPTED, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

6.4 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, BILLFLOW AND ITS OPERATORS SHALL NOT BE LIABLE FOR:

• Any indirect, incidental, special, consequential, or punitive damages
• Loss of profits, data, use, goodwill, or other intangible losses
• Damages resulting from unauthorized access to your account due to your failure to maintain credential security
• Damages arising from actions or omissions of Plaid, Stripe, or any other third-party service
• Financial losses based on information displayed in BillFlow
• Service interruptions, data loss, or security breaches at third-party providers

IN NO EVENT SHALL OUR TOTAL LIABILITY EXCEED THE AMOUNT YOU PAID TO BILLFLOW IN THE 12 MONTHS PRECEDING THE CLAIM.

6.5 Third-Party Liability

6.6 Indemnification

You agree to indemnify, defend, and hold harmless BillFlow and its operators from any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from:

• Your use of the Service in violation of these Terms
• Your violation of any applicable law or regulation
• Your infringement of any third-party rights
• Any content you submit to the Service

7 Intellectual Property

7.1 BillFlow Ownership

The BillFlow application, including its design, code, graphics, logos, and content (excluding your personal financial data), is the exclusive property of BillFlow and its operators. All rights reserved.

7.2 Your Data

You retain full ownership of all personal financial data you enter into BillFlow. By using the Service, you grant BillFlow a limited license to store, process, and display your data solely for the purpose of providing the Service to you.

7.3 Restrictions

• You may not copy, modify, distribute, sell, or lease any part of the Service
• You may not reverse engineer or attempt to extract the source code of the Service
• The BillFlow name, logo, and branding may not be used without written permission

8 Account Termination

8.1 Termination by You

You may delete your account at any time through Settings → Security → Delete Account. Upon deletion:

• All your personal data will be permanently deleted within 30 days
• Your Plaid connections will be revoked
• Your Stripe subscription will be canceled
• This action is irreversible — data cannot be recovered after deletion

8.2 Termination by BillFlow

We reserve the right to suspend or terminate your account immediately, without notice, for:

• Violation of these Terms of Service
• Fraudulent, abusive, or illegal activity
• Non-payment of subscription fees after reasonable notice
• Activities that harm other users, BillFlow, or third parties

8.3 Effect of Termination

Upon termination, your right to access and use the Service immediately ceases. Sections of these Terms that by their nature should survive termination (including but not limited to Disclaimers, Limitation of Liability, and Dispute Resolution) shall survive.

9 Dispute Resolution & Governing Law

9.1 Governing Law

These Terms are governed by and construed in accordance with the laws of the State of Texas, United States, without regard to its conflict of law provisions.

9.2 Informal Resolution

Before filing any formal legal claim, you agree to first contact us at support@thebillflow.com and attempt to resolve the dispute informally. We will make good-faith efforts to resolve disputes within 30 days.

9.3 Arbitration

Any dispute that cannot be resolved informally shall be resolved by binding arbitration under the rules of the American Arbitration Association (AAA). Arbitration shall take place in Austin, Texas. You waive your right to a jury trial and to participate in class action lawsuits.

9.4 Exceptions to Arbitration

Either party may seek injunctive or other equitable relief in a court of competent jurisdiction to prevent actual or threatened infringement, misappropriation, or violation of intellectual property rights.

9.5 Time Limitation

Any claim arising from use of the Service must be brought within one (1) year of the date the cause of action arose, or it is permanently barred.

10 Contact Information

For questions, concerns, or requests regarding these legal documents, your privacy rights, or the Service, contact us:

Specific Contact Reasons

• Data deletion requests: support@thebillflow.com
• Privacy rights requests (CCPA): support@thebillflow.com
• Security incidents or vulnerabilities: support@thebillflow.com
• Billing and subscription issues: support@thebillflow.com
• General support: support@thebillflow.com