Privacy Policy
Effective date: October 27, 2026
1. Introduction
Noodleflow Inc. ("Noodleflow," "we," "us") provides a cash management platform for businesses that sell across multiple channels. Noodleflow connects to a business's commerce, accounting, and financial accounts to show what cash is available to spend after fees, refunds, reserves, and obligations.
This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have. It applies to our website, our web application, and related services (together, the "Services").
Noodleflow currently provides read-only access to connected accounts. We do not open financial accounts, hold funds, initiate payments, or move money. If that changes, we will update this Policy before the new features launch.
The Services are designed for businesses. In this Policy, "you" means the business that holds a Noodleflow account and the individuals who use the Services on its behalf.
2. Information we collect
We collect information you give us, information from accounts you connect, and information generated when you use the Services.
| Category | Examples | Source |
|---|---|---|
| Account and contact information | Name, business name, email, phone number, job title, login credentials for Noodleflow | You |
| Business information | Legal business name, address, industry, sales channels | You |
| Connected commerce data | Orders, sales, refunds, fees, payouts, reserves, products, and related customer details | Shopify, Square (with your authorization) |
| Connected accounting data | Invoices, bills, vendors, chart of accounts, balances | QuickBooks (with your authorization) |
| Connected financial account data | Account names, types, balances, partial account numbers, and transaction history | Your financial institutions, through Plaid (with your authorization) |
| Analyses and reports | Cash position, forecasts, and other insights we generate from connected data | Generated by Noodleflow |
| Authorization records | When and by whom an account was connected, and the consents accepted | Generated by Noodleflow |
| Support communications | Messages, calls, and feedback you send us | You |
| Usage and device information | Pages viewed, features used, IP address, browser type, device identifiers, log data | Collected automatically |
We do not collect or store your login credentials for your bank, Shopify, Square, or QuickBooks accounts. Those connections use authorization tokens issued by each platform.
3. Connected accounts
You choose which accounts to connect, and our access is read-only. We can view data from connected accounts, but we cannot move money, make payments, or change your records in those accounts.
Plaid. We use Plaid Inc. ("Plaid") to connect to your financial accounts. By connecting an account, you authorize Plaid to collect data from your financial institution and share it with us, as described in Plaid's End User Privacy Policy. Noodleflow does not receive or store your bank login credentials.
Shopify, Square, and QuickBooks. We connect to these platforms through their official integrations. You approve the specific permissions we request during setup. Each platform's own privacy policy governs how it handles your data.
Disconnecting. You can disconnect any account at any time from your Noodleflow settings or through the platform itself. Section 8 explains what happens to data we have already collected.
4. How we use information
We use information to provide the Services and to run our business. Specifically, we use it to:
- Provide the Services, including calculating your available cash, forecasts, and reports
- Create and manage your account and verify who is authorized to act for your business
- Keep records showing that access to connected accounts was authorized
- Respond to support requests and communicate with you about the Services
- Send product updates and, where permitted, marketing messages you can opt out of at any time
- Monitor, secure, and troubleshoot the Services, and detect and prevent fraud or misuse
- Improve and develop the Services, using aggregated or de-identified data where possible
- Comply with legal obligations and enforce our agreements
We do not sell personal information. We do not use data from connected accounts for advertising, and we do not share it with third parties for their own marketing.
5. How we share information
We share information only as described below.
- Service providers. Vendors that help us run the Services, such as hosting, data storage, software development and maintenance, email, and customer support. They may use the information only to provide services to us, under contracts that require them to protect it.
- Integration partners. Plaid, Shopify, Square, and Intuit (QuickBooks), as needed to maintain the connections you authorize.
- At your direction. When you ask us to share information, for example with your accountant or advisor.
- Legal and safety. When required by law, subpoena, or court order, or when needed to protect the rights, property, or safety of Noodleflow, our users, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy's protections.
We may share aggregated or de-identified information that cannot reasonably identify you or your business.
Current service providers:
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting and data storage |
| SSI Decisions | Software development and maintenance |
| Plaid Inc. | Financial account connections |
| Google Workspace | Email and customer support |
| GoDaddy | Domain registration and DNS |
6. Information about your customers
When you connect Shopify or Square, we may receive personal information about your customers, such as names, email addresses, shipping addresses, and order history. We process this information only on your behalf and only to provide the Services to you.
For this information, you are responsible for having the notices and permissions your customers need, and we act as your service provider (also called a processor). We do not use your customers' information for our own purposes, sell it, or contact your customers.
If one of your customers asks us to access or delete their information, we will refer the request to you. When a platform such as Shopify sends us a customer data or deletion request, we will process it within the time the platform requires. A data processing addendum is available on request at support@noodleflow.io.
7. How long we keep information
We keep information only as long as we need it for the purposes described in this Policy. Every exception has a documented purpose and duration.
| Category | Retention period |
|---|---|
| Connected account data (transactions, orders, accounting records) and the analyses we create from it | Life of your account, plus 90 days after account closure so we can restore your account if you return and resolve any billing questions or disputes, unless you request earlier deletion |
| Account and contact information | Life of your account, plus 90 days after account closure. Billing records for your Noodleflow subscription are kept as long as tax and accounting laws require. |
| Authorization records (when access was granted, by whom, and the consents accepted) | Five years after account closure, to show that access was authorized. These records do not include your underlying transaction history unless a specific legal requirement applies. Access is limited to authorized security and compliance personnel. |
| Access tokens for connected accounts | Revoked or removed when you disconnect the account or close your Noodleflow account |
| System logs | For a limited period as needed for security, troubleshooting, and operations, then deleted |
| Backups | For a limited period on a rolling schedule. We take steps to prevent deleted data from being restored into active use. |
| Support communications | Two years after the request is closed |
We may keep information longer when required by law or to resolve a dispute, and only for that purpose.
8. Disconnecting accounts and deleting data
You can disconnect accounts and ask us to delete your data at any time.
When you disconnect an account, we stop collecting new data from it and revoke or remove the associated access tokens through that platform's supported process. Data we already collected stays subject to the retention periods in Section 7 unless you ask us to delete it sooner.
To request deletion, contact us at support@noodleflow.io. We will:
- Verify your identity and your authority over the Noodleflow account.
- Log your request and assign it to our technology and security team.
- Delete the data from our active systems within a reasonable time after verification, and within any deadline the law requires.
- Tell you if any exception or delay applies, and why.
Deletion covers stored connected-account data, reports and analyses specific to your business, access tokens, and copies held by our service providers. Logs and backups expire on the schedules in Section 7. We keep the limited authorization records described in Section 7, which do not include your transaction history.
9. Security
We use administrative, technical, and physical safeguards designed to protect your information. These include encryption of data in transit and, where supported by our infrastructure providers, at rest, access controls that limit data to personnel who need it, and monitoring of our systems.
No system is completely secure. If we learn of a security incident affecting your information, we will notify you as required by law.
You are responsible for keeping your Noodleflow login secure and for managing which people in your business have access.
10. Your privacy rights
Depending on where you live, you may have rights over your personal information. These include laws in Texas, California, and other states. Subject to legal exceptions, you may have the right to:
- Know what personal information we hold about you and get a copy
- Correct inaccurate information
- Delete your information
- Opt out of targeted advertising, sale of personal information, or certain profiling (we do not sell personal information or use it for targeted advertising)
- Not be discriminated against for exercising these rights
To exercise your rights, contact us at support@noodleflow.io. We will verify your identity before acting on a request. You may use an authorized agent where the law allows, and we may ask the agent for proof of authority.
We will respond within the time the law requires, usually 45 days. If we deny your request, you can appeal by replying to our decision. We will respond to your appeal within the time the law requires. If you disagree with the result, you may contact your state attorney general.
11. Cookies and similar technologies
We use only cookies and similar technologies that are strictly necessary to run the Services, such as keeping you signed in, remembering your settings, and securing the Services. We do not use analytics or advertising cookies. You can control cookies through your browser settings, but blocking them may stop the Services from working.
12. Children
The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.
13. Where we process information
Noodleflow is based in the United States. We and our service providers may store, access, and process information in the United States and other countries. Some of our service providers, including our software development partner, are located outside the United States and may access information from those locations to build, maintain, and support the Services.
When information is accessed or processed outside the United States, we take steps to protect it consistent with this Policy.
14. Changes to this Policy
We may update this Policy from time to time. We will post the updated Policy with a new effective date. If we make material changes, such as adding payment or banking features, we will notify you by email or in the Services before the changes take effect.
15. Contact us
Questions or requests about this Policy:
Noodleflow Inc.
6565 Hillcrest Ave, Suite 215
Dallas, Texas 75205
support@noodleflow.io