Privacy Policy

Last updated: 4 August 2026

Floatline is a cashflow forecasting tool for ecommerce businesses. This policy explains what we collect, why, and what we never do with it.

What we collect

• Account data. Your name and email address, provided by Google when you sign in. We never see or store your Google password.
• Business data you enter. Bills, revenue figures, forecasts, bank balances and related financial records you type into the product.
• Connected platform data. If you connect Xero, Shopify, Meta or Google Ads, we read only what the forecast needs: supplier bills and their due dates, daily order revenue totals, and daily advertising spend.
• Operational logs. Timestamps and error messages from data syncs, used to diagnose failures.

What we do not collect

• Customer names, addresses, emails or payment details from your store.
• Bank credentials. Floatline has no bank connection and cannot move money.
• Card or payment information of any kind.

How we use it

Solely to provide the product to you: computing your cashflow forecast, proposing entries for your approval, and keeping your data in sync. We do not sell your data, we do not share it with advertisers, and we do not use your business data to train machine learning models.

Connected platforms

Connections are read-only and per-business. Data arriving from a connected platform is never written into your cashflow automatically — it lands in an approval inbox for a human to accept, edit or reject. You can disconnect any platform at any time from Settings, which immediately deletes the stored access tokens.

Security

• All traffic is encrypted in transit (TLS) and data is encrypted at rest.
• Platform access tokens are stored in an encrypted secrets vault, separate from application data, and are readable only by the background sync process — never by a browser session.
• Every database table enforces row-level security, so one business's data is unreachable from another business's session. This is verified by automated tests on every code change.

Where data lives

Floatline stores data on Supabase infrastructure in the Asia-Pacific (Sydney) region, with the application hosted on Vercel.

Retention and deletion

We keep your data while your account is active. Financial history is append-only by design, so corrections create new revisions rather than erasing the record — this is what lets every number answer “where did this come from?”. You may request full deletion of your account and its data at any time by emailing us, and we will action it within 30 days.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. Contact support@floatline.app.

Changes

If this policy changes materially we will notify account owners by email before the change takes effect.