Privacy Policy
Effective July 29, 2026
1. Who we are
CashFlowAlign™ (“CashFlowAlign,” “we,” or “us”) is operated by Advisor Toolkit LLC, based in Texas, United States. CashFlowAlign provides software that helps households organize income, fixed commitments, and weekly spending so cash flow is clearer month to month. This policy explains how we collect, use, and share information through the CashFlowAlign website and app (the “Service”), including cashflowalign.net and related pages.
2. Information we collect
Information you enter in the app. Budget amounts, labels, timing, notes, household/client labels, and related planning inputs you type into CashFlowAlign. That data is stored in your browser’s local storage on your device. If you create an account and sign in, we also store your plan in our cloud database so you can access it across devices.
Account details. If you create an account: first name, email address, and password (stored hashed by our authentication provider). We may also store profile fields needed to operate your account (for example, linking your plan to your user ID).
Authentication emails. When you create an account, sign in, or request a password reset, our authentication provider may send transactional emails related to those actions.
Technical and usage data. When you visit the Service, our hosting and authentication providers may automatically receive standard server/log information such as IP address, browser type, device information, pages requested, and timestamps. We use this to operate, secure, and troubleshoot the Service.
Communications. If you email us, we receive the content of that message and your email address so we can respond.
Future billing data. Paid plans are not currently required. If we introduce billing, payment information will be processed by a payment provider, and we will update this policy before those features go live.
3. How we use information
- To provide and display the Service in your browser.
- To authenticate you, sync your plan across devices when you are signed in, and personalize account experiences (such as addressing you by first name).
- To operate, secure, improve, and troubleshoot the Service.
- To send transactional messages related to your account (for example, password reset).
- To respond to your questions and support requests.
- To communicate about the Service, security, or material policy changes when we have a way to reach you.
- To comply with applicable law.
We do not use your household budget entries for advertising profiles, and we do not sell personal information.
4. How we share information
- With subprocessors who help us run the Service under contracts that limit their use of the data to providing their services to us.
- To comply with legal process, protect rights, or respond to security incidents.
- In connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply or notice being provided as required.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
5. Subprocessors
We currently rely on the following providers to run the Service:
- Netlify — web hosting and content delivery.
- Supabase — authentication, account profiles, password-reset email delivery, and cloud database storage for signed-in plans.
If we add payment or email providers (for example Stripe or Resend), we will list them here and update this policy.
6. Data retention
Local browser data remains on your device until you clear it, use in-app reset/delete controls, or clear site data in your browser.
If you create an account, cloud plan and profile data are retained while your account remains active so the Service can sync across devices. You may request deletion of your account and associated cloud data by contacting us at the email below. Server logs retained by our providers are kept according to their practices and our operational needs. Support emails are retained as long as reasonably needed to resolve your request and meet legal or business requirements.
7. Security
We use industry-standard measures appropriate to a hosted web app, including encryption in transit (HTTPS) and access controls on cloud data (including row-level security for signed-in plans). Passwords are handled by our authentication provider and are not stored by us in plain text. You should also protect access to your devices and keep your account credentials confidential. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information, and to object to or restrict certain uses. For account and cloud data we hold, contact us at the email below. You can also update your first name in Account settings while signed in. For budget data stored only in your browser, you can delete it locally through the Service or your browser settings.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us so we can delete what we hold.
10. International users
CashFlowAlign is operated from the United States. If you access the Service from outside the United States, information processed by our hosting, authentication, and communications providers may be transferred to and processed in the United States (and other regions where those providers operate), which may have different data-protection rules than your country.
11. Changes to this policy
We may update this policy from time to time. If we make material changes, we will post the updated policy on this page and, when we have an email relationship with you (for example, because you created an account), notify you by email or through the Service before the changes take effect where required.
12. Contact
Questions about this policy? Email admin@advisortoolkit.net.