Privacy Policy

This Privacy Policy explains what information TxFlows collects, how it is used, and the choices you have. TxFlows is a stablecoin transaction tracking and Flow Statement product. We read public blockchain activity for the wallet addresses you add, organize it with labels you control, and produce monthly Flow Statements in CSV and PDF form.

We collect only what we need to run TxFlows for you:

• Account details. Your email address, managed through Supabase Auth for sign-in. We do not store your password, only the secure hash held by our authentication provider.
• Wallet addresses you add. These are public on-chain addresses, never private keys.
• Labels and notes you create. Counterparties, categories, and notes you attach to transactions.
• Documents you upload. Files you attach to transactions, stored with Supabase Storage.
• Billing details. Handled by Stripe when you subscribe. TxFlows does not store full card numbers.
• Service data. Basic technical and log data needed to operate and secure the service.

TxFlows is read-only. We read only public blockchain data, and we never ask for and never receive:

• Your private keys or seed phrase.
• The ability to move, send, or sign transactions for your funds.
• Custody of any of your assets.

Adding a wallet lets TxFlows read its public activity. It never grants TxFlows control of the wallet.

We use the information above to:

• Import and display your transactions and build your Flow Statements.
• Create your account and sign you in.
• Process subscription billing through Stripe.
• Store and return the documents you upload.
• Keep the service secure, reliable, and working as intended.
• Respond to your support requests and meet legal obligations.

We do not sell your personal information.

We share information only with the providers that run TxFlows, and only as needed to operate it:

• Supabase, for the database, authentication, and document storage.
• Stripe, for subscription billing and payment processing.
• Cloudflare, for hosting and content delivery.
• Blockchain data providers, which we query to read public on-chain activity for the networks you track, such as Ethereum, Solana, and TRON.

We may disclose information when the law requires it, or to protect the rights and safety of our users and the service. We do not sell your personal information.

We keep your information for as long as your workspace is active and as needed to provide the service. Imported transaction records and the Flow Statements built from them are retained so your history stays complete. You can delete labels, notes, and documents you have added. When you close your workspace, we delete or de-identify your personal information within a reasonable period, except where we must retain records to meet legal, security, or billing obligations.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update your account details and manage much of your data directly in the app. To make a request, contact us using the details below. We will respond as applicable law requires.

TxFlows relies on providers that may process and store information in countries other than yours. Where information moves across borders, we rely on the protections those providers offer and on applicable safeguards. By using TxFlows, you understand that your information may be processed in these locations.

We use the security features of our infrastructure providers to protect your information, including encryption in transit, access controls, and signed, time-limited links for document uploads and downloads. No method of transmission or storage is fully secure, so we cannot promise absolute security, but we work to protect your information and to address problems promptly.

TxFlows uses a small set of cookies and similar technologies that are needed to sign you in, keep your session secure, and remember basic preferences such as your theme. This draft does not describe advertising or third-party tracking cookies. If we add analytics later, we will update this policy and offer any choices the law requires.

We may update this Privacy Policy as TxFlows changes or as the law requires. When we make material changes, we will update the date at the top of this page and, where appropriate, give additional notice. Continued use of TxFlows after an update means you accept the revised policy.

If you have questions about this Privacy Policy or how we handle your information, email us at privacy@txflows.com.