How we protect your data

Connecting your bank

Bank connections are made through Plaid, which thousands of financial apps use to connect to banks. You sign in at your own bank, in Plaid’s window rather than ours. Flocuity never sees or stores your bank username or password. The Plaid End User Privacy Policy covers how Plaid handles your data, and our Privacy Policy covers how we do.

• Flocuity can’t move money. We read transactions and balances, and nothing we hold can be used to pay, transfer or withdraw from your bank.
• The access token we are given is sealed with AES-256-GCM encryption before it’s stored, with a key kept outside the database.
• Disconnect a bank at any time from the app. The connection is then revoked at the source.

Uploading bank files

When you upload a bank export, the transactions are read into your forecast and the file itself is kept only briefly, in private storage. Stored files are removed automatically 30 days after upload, and after 14 days for an account that never started a plan. The file can only ever be stored inside your own business’s folder.

Connecting your accounting software

QuickBooks Online or Xero connect through their own official sign-in. We read your invoices and bills (the open ones, and when past ones were paid) and the bank accounts and transactions recorded in your books. Their tokens are sealed with the same AES-256-GCM encryption as a bank’s, and you can disconnect at any time.

Connecting Square and Stripe

Square connects on Square’s own sign-in page, and Stripe by installing Flocuity’s app in your Stripe account. We read your open invoices, your payouts, your Stripe subscriptions and, when you ask, your Square team’s timecards, and we never write anything back. Their tokens are sealed with the same AES-256-GCM encryption as a bank’s, and you can disconnect at any time.

Who can see what

• Roles. Every member is an owner, an editor or a viewer. Viewers can’t change anything. Only owners manage members and billing.
• Private pay. Staffing pay details are visible only to the people an owner chooses.
• Separated by design. Row-level security in the database ties every record to one business, and we test those rules automatically before each release.
• A record of changes. Important actions are written to an activity log with who did them and when.

Signing in

Passwords are handled by our authentication provider and stored only as a salted hash: nobody at Flocuity can read yours. New passwords are checked for strength. Session cookies are HttpOnly, sent over HTTPS only, and can’t be read by scripts on the page.

• Two-step sign-in. Anyone can add an authenticator app to their login, so a stolen password isn’t enough to get in. It’s enforced by the database itself, not only by the sign-in screen: until the code is entered, no data is shown at all.
• Sign out everywhere. One button in Settings signs you out on every other browser and device.

Payments

Cards are handled entirely by Stripe. Your card number goes from your browser to Stripe and never touches our servers.

Where your data lives

The application runs on Vercel and the database on Supabase, both on major cloud infrastructure, and both hold SOC 2 Type II reports. We add security headers on every page, including a content security policy that stops other sites from embedding our pages.

What we never do

• We never sell your data, and we never share it with advertisers.
• We never use your financial data to train AI models.
• We never ask for your bank password.
• We never write to your bank, your books, Square or Stripe. Those connections read; they cannot change anything at the other end.
• We never move money. There is nothing in Flocuity that can.
• We never ask for a Social Security number, a home address or bank details for anyone on your team. The Staffing Model needs a name or a title, pay, hours and dates.

Who at Flocuity can see your data

People at Flocuity look at a business’s data only to keep the service running, to answer a question you have asked us about it, or when the law requires it.

Deleting your data

An owner can delete the business from Settings. That cancels the subscription, disconnects every bank, books, Square and Stripe connection, removes stored files, and deletes the business’s records. You can also delete your own login.

Reporting a problem

Found a vulnerability, or something that doesn’t look right? Write to security@flocuity.com. We read every report and reply within three business days. See also our Privacy Policy.