Privacy Policy — FlashFlow

1

Introduction and Scope

FlashFlow ("FlashFlow," "we," "our," or "us") is a financial intelligence platform operated by HVAC Success, Inc., a company organized under the laws of the United States ("Company"). FlashFlow enables business users to connect their bank accounts, credit card accounts, and accounting software to receive insights into cash flow, accounts payable, accounts receivable, and financial forecasting.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information about you and your business when you use the FlashFlow platform, website, mobile application, and any related services (collectively, the "Service"). This policy applies to all users of FlashFlow, including individuals who access the Service on behalf of a business entity.

This Privacy Policy is incorporated into and subject to our Terms and Conditions. Capitalized terms not defined herein shall have the meanings given in the Terms and Conditions.

2

Information We Collect

2.1 Account Registration Information

When you create a FlashFlow account, we collect information such as:

Full legal name of the authorized representative
Business name and legal entity type
Business email address and phone number
Username and hashed password credentials
Billing and payment information
Business address and contact details
Federal Employer Identification Number (EIN) or other business identification numbers, where applicable

2.2 Financial Account Data via Plaid

FlashFlow uses Plaid Inc. ("Plaid") to facilitate connections to your business bank accounts and credit card accounts. When you connect your financial accounts through Plaid, we may collect and receive:

Account balances, transaction history, and transaction details
Account numbers (in masked or tokenized form), routing numbers, and account types
Account holder names and institution names
Pending transactions and historical transaction data
Income and spending pattern data derived from transaction history
Account ownership and institution verification data

Important: Your use of Plaid's services is also subject to Plaid's Privacy Policy, available at https://plaid.com/legal/privacy-policy/. We do not store your financial institution login credentials. FlashFlow receives only the data tokens and financial data that Plaid transmits to us on your authorization.

2.3 Accounting Data via QuickBooks

FlashFlow integrates with Intuit QuickBooks through Intuit's authorized APIs. When you connect your QuickBooks account, we may access and collect:

Chart of accounts and general ledger data
Accounts payable (AP) and accounts receivable (AR) records
Invoice, bill, and payment records
Vendor and customer information
Payroll expense summaries (as reflected in your accounting records)
Financial reports, including profit and loss statements and balance sheets
Cash flow statements and budget data

Important: Your use of QuickBooks and Intuit's services is subject to Intuit's Privacy Policy and Terms of Service. FlashFlow accesses your QuickBooks data solely through Intuit's authorized OAuth-based integration framework.

2.4 Usage and Technical Data

We automatically collect certain technical and usage data when you interact with the Service, including:

IP address, browser type, browser version, and operating system
Device identifiers and hardware model information
Pages viewed, features accessed, and time spent within the Service
Clickstream data and interaction logs
Error reports and diagnostic crash data
Referring URLs and search terms used to reach the Service
Session identifiers and authentication tokens

2.5 Communications and Support Data

When you contact us for support, submit feedback, or communicate with us through any channel, we collect:

The content of your communications, including emails, chat messages, and support tickets
Information you provide when describing technical issues or account problems
Correspondence records and response history

2.6 Information Collected from Third Parties

We may receive information about you from third-party sources, including identity verification services, fraud prevention services, and publicly available business registries, which we may combine with information we have collected directly.

3

How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Operating the Service

Authenticating your identity and maintaining your account
Connecting and synchronizing your financial accounts via Plaid and QuickBooks
Generating cash flow insights, AP/AR analyses, and financial forecasts
Displaying financial dashboards, reports, and alerts
Processing payments for subscription fees

3.2 Support, Debugging, and Account Maintenance

FlashFlow team members, including employees, contractors, and authorized personnel of HVAC Success, Inc., may access your account data, including your connected financial data, transaction records, and accounting information, for the following legitimate operational purposes:

Investigating and resolving technical issues, bugs, or errors you report
Providing customer support and responding to your inquiries
Diagnosing system performance issues or data synchronization failures
Conducting quality assurance testing and verifying feature functionality
Monitoring for fraud, security incidents, or unauthorized access
Ensuring data integrity and accuracy of financial insights provided

By using FlashFlow, you explicitly consent to FlashFlow personnel accessing your account data as necessary for support and operational purposes described above. Access by FlashFlow personnel is logged and limited to personnel with a legitimate need.

3.3 Security and Fraud Prevention

Detecting, investigating, and preventing fraudulent or unauthorized activity
Monitoring for security threats and vulnerabilities
Enforcing our Terms and Conditions and other agreements

3.4 Product Improvement and Analytics

Analyzing aggregated, de-identified usage data to improve the Service
Developing new features and enhancements
Conducting internal research and analysis
Testing and optimizing algorithms used for financial forecasting

3.5 Legal and Compliance Purposes

Complying with applicable laws, regulations, and legal processes
Responding to lawful government or regulatory requests
Enforcing our legal rights and defending against claims
Maintaining records required by law or regulation

4

Disclosure of Your Information

We do not sell your personal information or your financial data to third parties. We may share your information in the following circumstances:

4.1 Service Providers and Subprocessors

We engage third-party vendors and service providers who process data on our behalf, including:

Plaid Inc. – for financial account connectivity
Intuit Inc. – for QuickBooks integration
Cloud infrastructure providers (e.g., hosting, storage, CDN)
Payment processors for billing and subscription management
Analytics and monitoring service providers
Customer support software providers

These service providers are contractually required to use your information only as directed by FlashFlow and in accordance with this Privacy Policy.

4.2 Business Transfers

In the event of a merger, acquisition, restructuring, asset sale, or other business transaction involving HVAC Success, Inc. or FlashFlow, your information may be transferred as part of that transaction. We will notify you of any such transfer and any choices you may have regarding your information.

4.3 Legal Requirements and Protection of Rights

We may disclose your information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce this Privacy Policy or our Terms and Conditions; (c) protect the rights, property, or safety of FlashFlow, HVAC Success, Inc., our users, or the public; or (d) detect, prevent, or address fraud, security, or technical issues.

4.4 With Your Consent

We may share your information for any other purpose with your explicit prior consent.

5

Data Retention

We retain your information for as long as your account is active or as necessary to provide the Service. We also retain information as required to comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes including fraud prevention and security.

Upon account termination, we will retain financial and transactional data for a minimum of seven (7) years to comply with applicable financial recordkeeping requirements, after which time we will delete or anonymize such data in accordance with our internal data retention schedule. De-identified and aggregated data may be retained indefinitely.

Your right to request deletion of data is subject to overriding legal retention requirements and may not extend to data we are legally obligated to maintain.

6

Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit using TLS, encryption of data at rest, access controls and authentication requirements for FlashFlow personnel, and regular security assessments.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. You agree to notify us immediately of any unauthorized access or breach of your account security.

FLASHFLOW, HVAC SUCCESS, INC., AND THEIR RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, AGENTS, SUCCESSORS, AND ASSIGNS SHALL NOT BE LIABLE FOR ANY UNAUTHORIZED ACCESS TO, DISCLOSURE OF, OR LOSS OF YOUR DATA RESULTING FROM CIRCUMSTANCES BEYOND OUR REASONABLE CONTROL, INCLUDING CYBERATTACKS, THIRD-PARTY SECURITY BREACHES, OR ACTS OF NATURE.

7

Third-Party Services and Links

The Service integrates with and may contain links to third-party services, including Plaid, QuickBooks/Intuit, and your financial institutions. These third parties have their own privacy policies, and we have no control over, and assume no responsibility for, the privacy practices or content of third-party services. We encourage you to review the privacy policies of all third-party services you connect to FlashFlow.

FlashFlow's integration with Plaid is subject to Plaid's End User Privacy Policy. FlashFlow's integration with QuickBooks is subject to Intuit's Global Privacy Statement. We are not responsible for the data practices of these third parties.

8

Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the Service. These technologies may collect information such as your browser type, pages visited, time of visit, and referring URLs. You may control cookie settings through your browser preferences; however, disabling cookies may impair certain features of the Service.

We do not respond to "Do Not Track" signals at this time, as there is no uniform standard for such signals.

9

Children's Privacy

The Service is intended solely for business use by adults. FlashFlow does not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal information from a minor, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10

State and Regional Privacy Rights

Depending on your jurisdiction, you may have certain rights with respect to your personal information. These may include the right to access, correct, delete, or restrict processing of your personal information. To the extent required by applicable law, you may submit a request to exercise these rights by contacting us at the address below. We will respond to verifiable requests within the timeframes required by applicable law.

FlashFlow is a business-to-business service. The data we collect relates primarily to your business operations. Certain consumer privacy rights (such as those under the California Consumer Privacy Act, as amended) may apply to the personal information of individual authorized users. We reserve the right to verify your identity before fulfilling any privacy rights request.

11

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on our website with a revised effective date, and, where required by law, by providing additional notice such as by email. Your continued use of the Service following notice of changes constitutes your acceptance of the updated Privacy Policy.

12

Contact Us

If you have questions or concerns about this Privacy Policy, or wish to exercise any applicable privacy rights, please contact us at:

HVAC Success, Inc. — FlashFlow Privacy Team

Email: [email protected]

Mailing Address: 66 West Flagler Street – Suite 900, Miami, FL 33130