Privacy policy

Accountant Flow is practice-management software for accounting firms in Australia. This policy covers the website, staff web app, Office and Chrome sidebar, and the iOS and Android mobile apps.

Who we are

Questions: support@accountantflow.com.au.

What we collect

Staff accounts store name, email, password hash, optional two-factor secret, and session tokens. Firm data (clients, jobs, time, notes, files) is entered by the practice and belongs to that practice. The mobile app stores the server URL and an access token on the device using the OS keychain or encrypted preferences. It does not sell personal information or use third-party advertising SDKs.

Our marketing website

When you arrive at accountantflow.com.au from an ad, a social post or another site, we store a first-party cookie for up to 90 days recording how you found us: the campaign tags in the link, the referring website and the page you landed on. If you sign up, that record is kept with your firm's account so we can tell which channels bring firms to us. It is not shared with anyone.

How we use it

We use account details to authenticate staff, sync the job timer and work lock across the web app, sidebar, and mobile app, and to record notes and time against jobs. Sidebar and mobile access tokens expire after 24 hours and can be revoked at any time from Profile in the web app or by signing out of the mobile app.

Retention and deletion

Practice records are retained for the firm until the firm deletes them or ends its subscription, subject to legal and professional record- keeping duties. You can delete your own staff login from the mobile app (Settings → Delete account) or ask your firm administrator. See account deletion.

Security

Traffic uses HTTPS. Passwords are hashed. Sensitive client fields are encrypted at rest where the product documents that protection. Access is limited to the firm's authorised staff.