Who we are
Cash Flow Inventory, House No: 1474, Gangachara Road, Chabbishhajari, Porshuram, Rangpur 5400, Bangladesh, is responsible for the personal data described here. Write to info@cashflowinventory.com about anything in this notice.
What we collect and why
When you write to us
Your name, e-mail address, the topic and your message, to answer you; we keep them with our customer records so whoever answers sees the whole conversation. Legal basis: our legitimate interest in answering questions, or steps before a contract when you ask about buying. We send you product news only if you tick the box for it, and we first e-mail you once to confirm (double opt-in).
When you ask for guides by e-mail
Some articles offer to e-mail a template and the next guides on the same subject. Downloads never need an e-mail address. If you ask, we keep your e-mail address, the subject and the page you asked from, and send what you asked for. Product news only if you tick the box for it: before any news we e-mail you once to confirm, and we keep a record of your choice (the wording of the box, the date and time, the form and page, and your network address with the last part removed) to show what you agreed to. Every e-mail has an unsubscribe link, and unsubscribing stops all marketing at once. Legal basis: your request for the guides; your consent for product news, which you can withdraw at any time.
When you use the chat
The chat on the website, the documentation and the blog sends your messages (and the name and e-mail address if you give them) to our support team. An AI assistant may answer first, using our documentation; its answers can be wrong, and you can ask for a person at any time. The AI model is run by an AI service provider that processes the conversation on our behalf only to produce the reply (see who receives data). Please don’t type passwords or card numbers into the chat. We keep the conversation with our support records as long as needed to answer you and follow up; ask us and we delete it. Your browser also keeps the conversation on this device until you choose “End and clear”. Legal basis: our legitimate interest in answering questions, or steps before a contract when you ask about buying.
Where visits come from
Only if you accept optional cookies in the banner, a small cookie (cfi_src) remembers for 30 days the first page you landed on, the campaign tags in its link and the website that linked to it, so we can see which pages and campaigns bring people who sign up or ask for guides. It holds no identifier. It is never set if you reject, or if your browser sends Global Privacy Control, and “Reject” removes it. Without it, a form you send tells us only the campaign tags of the page you send it from and the website that linked to that page. Legal basis: your consent.
WhatsApp and other messaging
We message you on WhatsApp only after you ask us to (opt in). Outside a conversation you started, we use only message templates WhatsApp has approved. Reply STOP, or tell us, and we stop.
Following up on enquiries
We use simple rules (for example, which guides you asked for and whether you started a trial) to decide which enquiries to answer or follow up first. They decide nothing else about you and have no legal or similarly significant effect. A person reviews any sales message before it is sent.
When you create an account
Your name, e-mail address and optional phone number; the business name, business ID, country, business type and optional address; and a password, which we store only as a one-way hash. We use them to create and run your account, to send the e-mail confirmation link and service messages, and to bill paid plans. Legal basis: performing our contract with you.
When you pay for a plan
Payments are taken on 2Checkout’s secure page. 2Checkout receives your name, e-mail address and phone number with the plan and amount; we never receive your card number.
When you sign in
Sign-in records the time, the result and the network address, to protect accounts against misuse. Legal basis: our legitimate interest in keeping accounts secure.
Measuring visits
Google Analytics 4 counts visits only if you accept it in the cookie banner. Google receives page addresses, the browser and device type and an approximate location; it does not store your IP address. Legal basis: your consent, which you can withdraw at any time under “Cookie settings”.
Protecting the site
To stop automated abuse of the contact form we keep a one-way hash of the sending network address with the time of each message for one hour, and a daily count.
Data you keep in the app
The records your business keeps in Cash Flow Inventory about its own customers, suppliers and staff belong to your business: your business decides why and how they are used, and we process them only to provide the service to you. The app gives your business tools to export or erase a person’s data and to choose how long message content is kept; see security and privacy.
Legal bases in short
- Contract: creating and running your account, billing paid plans.
- Legitimate interests: answering questions and chat messages, keeping accounts and forms secure, following up on enquiries (you can object at any time).
- Consent: product news by e-mail, WhatsApp messages, the optional
cfi_srccookie and analytics. You can withdraw it at any time; that does not affect what happened before. - Legal obligation: keeping accounting records of payments.
Who receives data
- 2Checkout, for payments of paid plans.
- Service providers that work for us as processors, only for what each one does for us: hosting, sending e-mail, and the AI service that drafts chat answers and helps sort enquiries.
- Google, for analytics, only if you accept it.
- Meta (WhatsApp), only if you opt in to WhatsApp messages.
- The services your business connects in the app (online stores, couriers, messaging providers), with the data your business sends them.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We honour Global Privacy Control as an opt-out signal.
Where data is processed
As our terms of use state, the site is hosted in Bangladesh. If you use it from another country, your data is transferred to and processed in Bangladesh. Some of the service providers above (for example for e-mail and AI) may process data in other countries. Those countries may not protect personal data the way your country’s law does; we give each provider only what it needs to do its job for us.
How long we keep it
- Account data: while the account exists; accounting records of payments for as long as the law requires.
- Messages and chats you send us: as long as needed to answer you and follow up, or until you ask us to delete them.
- Your marketing choice and its record: as long as we may contact you, and after you unsubscribe, your address on a do-not-contact list so we never write again by mistake.
- Form-abuse records: one hour (the daily count holds no personal data).
- Your cookie choice: 180 days, in your browser. The optional
cfi_srccookie: 30 days.
Your rights
Wherever you live, you can ask us:
- for access to your data and a copy of it, in a portable format;
- to correct it or to delete it;
- to stop or limit a use of it, including all marketing (opt out) — the unsubscribe link in any e-mail does this at once;
- to withdraw consent you gave, at any time.
How to ask: use the contact form with the topic “Privacy or data request”, or write to info@cashflowinventory.com. We may ask you to confirm who you are, and we answer within one month. Using your rights costs nothing and never affects how we treat you. You may also complain to the data protection authority where you live or work. For data your business keeps in the app about its own customers, ask that business: it decides about that data.
Children
The site and services are for people aged 18 or over.
Changes
When this notice changes, we update the date at the top of this page.