Privacy Policy

Effective date: July 9, 2026

Conflux ("we," "us," or "our") is operated by Conflux Verified LLC, an Indiana limited liability company. Conflux provides integrated accounting, construction estimating, personal finance, and rental management software for makers, builders, and contractors.

This policy explains what information we collect through our website (confluxapps.com) and the Conflux application (app.confluxapps.com), how we use it, and the choices you have. It is written for users in the United States.

The short version: we collect only what we need to run Conflux for you, your bank sign-in credentials never touch our servers, and we never sell your data or share it for advertising.

1. Information You Provide to Us

Account information. You sign in to Conflux with your Google account. When you do, we receive your name, email address, and basic Google profile information. We never see or store your Google password.

Financial information. Conflux is accounting software, so the information you put into it is financial by nature: transactions, account balances, budgets, invoices, estimates, and related records. This data reaches Conflux in three ways:

• Linked bank accounts. You can connect your bank account through Stripe Financial Connections. When you link an account, you sign in to your bank directly within Stripe's secure interface — your bank username and password go only to Stripe and its banking partners, never to Conflux. With your permission, Stripe then shares your account details, account owner information, balances, and transaction data with us so Conflux can do its job — the specific data types are shown to you in Stripe's consent flow when you link the account. Stripe's handling of your information is described in the Stripe Privacy Policy.
• Files you import. You can upload statement exports from your bank (CSV, OFX, or QBO files).
• Manual entry. You can type transactions and records in yourself.

However your data arrives, we never see, ask for, or store your bank usernames, passwords, or other login credentials. You can disconnect a linked bank account at any time in the application — see Section 6 for what disconnection does and how to have already-shared data deleted.

Business records. Estimates, project details, cost tracking, rental property records, and similar content you create in the application.

Contact form. If you use the contact form on our website, we collect your name, email address, and message, plus phone number and company name if you choose to provide them. We use this to respond to you and set up demo access.

2. Information About Your Tenants and Clients

If you use Conflux for rental management or estimating, you may enter information about people other than yourself — for example, tenant names, contact information, and payment history, or client billing details on estimates and invoices.

We process this information on your behalf, solely to provide the service to you. You are responsible for making sure you have the right to enter and use this information. We do not use tenant or client information for any purpose of our own, and we never contact your tenants or clients for marketing.

If you are a tenant or client of a Conflux user and have questions about information held about you, you can contact the Conflux user directly or email us at oliver@confluxapps.com.

3. Information Collected Automatically

Website analytics. Our website uses our own first-party page-view tracking. It stores a randomly generated visitor ID in your browser's localStorage and records the pages you view and any campaign (UTM) parameters in the link you arrived from. This data goes only to our own servers. We do not use advertising pixels, third-party analytics services, or cross-site tracking on our website.

Application diagnostics. The Conflux application collects session and error diagnostics (such as error reports and performance information) so we can find and fix problems.

Server logs. Like almost every online service, our servers automatically log basic technical information such as IP address, browser type, and request times.

Bot protection. Our website contact form uses Cloudflare Turnstile to distinguish people from bots. Turnstile is operated by Cloudflare; see Cloudflare's privacy policy.

4. How We Use Your Information

• To provide, maintain, and improve Conflux;
• To respond to your questions and provide support;
• To send you service-related notifications (such as account or billing notices);
• To protect the security and integrity of the service, including preventing fraud and abuse;
• To comply with legal obligations.

We never sell your personal information, and we never share it with third parties for their advertising or marketing. This includes your financial data and any information about your tenants and clients.

5. Service Providers

We use a small number of service providers to run Conflux. They process data only on our instructions and only to provide their services to us:

• Google Cloud — hosts the Conflux application and data, and provides sign-in (Google Identity-Aware Proxy).
• Stripe — provides bank account linking through Stripe Financial Connections, as described above. See the Stripe Privacy Policy.
• Cloudflare — hosts our website and provides bot protection on the contact form.
• Email and SMS providers — deliver notifications and messages we send you.

Planned services. As Conflux grows, we plan to add:

• Payment processing through Stripe for subscription billing and, potentially, rent and invoice payments. When this launches, payment card details will go directly to Stripe; Conflux will not store card numbers.
• AI-assisted features (such as automatic transaction categorization) using AI service providers. Any such provider will be contractually prohibited from using your data to train their models.

We will update this policy when these features launch.

We may also disclose information if required by law, such as in response to a valid subpoena or court order, or to protect the rights, safety, or property of our users or others.

6. Data Retention and Deletion

We keep your information for as long as your account is active. Your financial records are yours — we retain them so the service works for you, not to exploit them.

After you close your account. Your books are business records you may need for taxes or an audit, so after your account closes we archive your data for up to seven years. During that time you can restore your account and recover your records. We encourage you to export your records before closing your account.

Deletion on request. You can ask us to delete your data at any time — whether or not your account is closed — by emailing oliver@confluxapps.com from the email address on your account. We will delete your data within 30 days, with two exceptions: records we are legally required to keep for our own compliance (for example, billing and tax records of your subscription), and information reasonably needed to prevent fraud or resolve legal claims — which we delete when no longer required. Deletion is permanent. Tax law requires you to keep your own business records, so export your data before requesting deletion.

Linked bank accounts. Disconnecting a linked bank account stops any new data from being shared with Conflux, but does not delete the data already shared. If you want that data deleted as well, include it in your deletion request: we will delete it from our systems and forward your request to Stripe so the connection data can be removed from Stripe's systems too.

7. Security

We protect your information with commercially reasonable safeguards, including encryption in transit and at rest, and access controls that limit who can reach production data. No online service can guarantee perfect security, but we treat your financial data with the care we'd want for our own.

8. Your Privacy Rights

Wherever you live in the United States, we extend the same rights to you:

• Access — ask for a copy of the personal information we hold about you;
• Correction — ask us to fix inaccurate information (most data in Conflux you can edit yourself);
• Deletion — ask us to delete your personal information, as described above;
• Portability — ask for your data in a portable format.

To exercise any of these rights, email oliver@confluxapps.com. We will verify your identity (typically by confirming control of your account email) and respond within 45 days. We will never discriminate against you for exercising your privacy rights.

9. Children's Privacy

Conflux is business and financial software intended for adults. It is not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to This Policy

If we change this policy, we will post the updated version here with a new effective date. For material changes, we will also notify you in the application or by email before the change takes effect.

11. Contact Us

Questions, requests, or concerns about privacy:

Conflux Verified LLC
Email: oliver@confluxapps.com