FlatBooks

Privacy Policy

Last updated: 2026-09-27

Who we are

FlatBooks is operated by Blueridge Web Services LLC, doing business as BrainIT Consulting (Fort Myers, FL). This policy explains what we collect, how we use it, and who we share it with. We do not sell your data.

What we collect

  • Account data: your name, email, and password (stored hashed, never in plain text).
  • Business data you create: your business settings, clients, invoices, and the bank transactions you import or enter.
  • Connected-payment credentials: if you add your own PayPal app credentials, the secret is encrypted at rest and is never shown back to you or anyone else.
  • Payment info: your subscription card is handled entirely by Stripe. We never receive or store your full card number.
  • Basic technical data: a sign-in session cookie and standard server logs needed to run and secure the service.

How we use it

Solely to provide FlatBooks: to run your books, send the invoices and reminders you ask us to, process your subscription, keep the service secure, and support you. We do not use your business or customer data for advertising, and we do not sell it.

Who we share it with (subprocessors)

We use a small set of trusted providers to operate FlatBooks, each handling only what their job requires:

  • Stripe — subscription billing and card processing.
  • PayPal — when you enable it, to create the pay links on your invoices.
  • Resend — to deliver transactional email (invoices, reminders, account notices).
  • Plaid — when you connect a bank account, to fetch your bank transactions. You sign in to your bank through Plaid; we never see your bank password.
  • AI assistants you connect (for example Claude or ChatGPT) — when you connect one in Settings, it can read your books and, if you allow it, make changes, within the access you grant. Its maker handles that data under its own privacy policy. You can disconnect it at any time in Settings.
  • OneTruck (a DreamForge app) — if you create a connection key for it, OneTruck sends transactions into your FlatBooks books. You can revoke the key at any time in Settings.
  • Neon (database) and Vercel (hosting) — to store data and run the application.

Security

Data is transmitted over TLS and stored with a managed database provider. Sensitive secrets (like connected PayPal keys) are encrypted at rest with AES-256-GCM. No system is perfectly secure, but we take reasonable measures to protect your information.

Data retention & your rights

We keep your data while your account is active. You can export your data any time, and you can ask us to delete your account and its data by emailing us. We may retain limited records where required by law (for example, billing records).

Cookies

We use a single first-party cookie to keep you signed in. We don't use third-party advertising or tracking cookies.

Children

FlatBooks is for businesses and is not directed to anyone under 18.

Changes & contact

We'll post any changes here with a new date. Questions or requests (including data export or deletion)? Email support@dreamforgeworld.com. We reply within one business day.