Privacy Policy

1. Who we are

TxFlow ("we", "us") provides bank statement data extraction services to accountants and businesses in Hong Kong. This policy explains how we collect, use, and protect personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

2. Data we collect

Account data: your name, email address, and company details when you register.

Statement data: bank statement PDFs and the transaction data extracted from them, which you or your clients upload. Statements may contain personal data of account holders.

Usage data: log information about how the service is used, for security and reliability purposes.

3. How we use data

We use data solely to provide the service: extracting transactions from statements, displaying results to you, and operating your account. We do not sell personal data, and we do not use your statements to advertise.

4. Data security

Statement files are encrypted in transit and at rest. Access is restricted to the account that uploaded them and authorised users of that account. We apply access controls, audit logging, and retention limits in line with Data Protection Principle 4.

5. Retention

You may delete statements and extracted data at any time from your workspace. Deleted data is removed from active systems promptly and from backups within 30 days.

6. Your rights

Under the PDPO you may request access to, and correction of, your personal data. Contact us at info@txflow.top and we will respond within 40 days as required by law.

7. Contact

Questions about this policy: info@txflow.top.