This policy explains what information we handle when you use CharFlo, why we handle it, and the choices you have. We designed the product to hold client financial data carefully and to keep each client's information separate.
Who we are
CharFlo is operated by Charcounting. If you are a client of a firm that uses CharFlo, that firm is your primary point of contact and directs how your data is used within the service.
Information we handle
- Account details: name, email, role, and sign-in credentials.
- Documents you provide: bank and card statements, receipts, tax documents, and other financial records you or your firm upload.
- Financial activity: transactions, categorizations, ledgers, and statements derived from your documents or from accounts you choose to connect.
- Communications: messages and questions exchanged between a client and their firm.
- Operational records: security and audit logs kept to protect and support the service. These are kept free of unnecessary personal detail.
How we use it
- To provide the accounting services: reading documents, reconciling and categorizing activity, and preparing statements and reviews.
- To let your firm review, approve, and share work with you.
- To secure the service, prevent abuse, and meet legal and professional obligations.
- To support you and improve reliability.
Automated and AI processing
We use automated systems, including AI models, to extract information from documents, categorize transactions, and draft suggestions. This processing is done under contract by vetted service providers bound by confidentiality and data-protection commitments. Your data is not used to train public, general-purpose models. A qualified person reviews the output before it is relied upon.
How we share it
We do not sell your information. We share it only with:
- Your firm and the authorized members handling your engagement.
- A small set of vetted sub-processors that operate the service on our behalf, under written confidentiality and data-protection agreements, and only to the extent needed to run CharFlo.
- Authorities or advisors where required by law or to protect rights and safety.
Each client's data is isolated. The service is built so that one client's information is not exposed to another.
Bank connections
If you connect an account, you authorize a secure, read-only connection to bring in transaction history. We do not receive or store your banking passwords, and we cannot move money. You can disconnect an account at any time.
Security
We protect data with encryption in transit and at rest, role-based access controls, least-privilege access, private storage, and audit logging. Access to client data is limited to those who need it for the engagement.
Your choices and rights
- Access a copy of your information or ask for a correction.
- Request deletion of your data, subject to legal and professional retention requirements.
- Disconnect connected accounts and stop new data from flowing in.
Requests from a client are typically coordinated through the firm that serves you.
How long we keep it
We keep information only as long as needed to provide the service and to meet legal, tax, and professional obligations. See Data retention for details.
Cookies
We use only the cookies needed to keep you signed in and to keep the service secure. We do not use advertising trackers.
Public-site interactions
The live globe uses a random per-tab identifier and broad, rounded location information to estimate how many browser sessions are viewing the page. The identifier is stored in session storage and expires when the tab closes. It is not used for advertising or to identify a person.
Children
CharFlo is a professional tool and is not intended for anyone under 18.
Changes
We may update this policy as the service evolves. Material changes will be reflected here with a new effective date.
Contact
Questions about this policy or your information: info@charcounting.com.