Privacy Policy

Florink provides the app. The bookkeeping, payroll and sales tax services are performed only by the accounting team, the CPA firm registered with the Texas State Board of Public Accountancy that is affiliated with Florink and named in your engagement letter, under the engagement letter you sign at signup. Florink is not a CPA firm. Florink hosts the app and processes information for the accounting team under the same safeguards described here.

For the records in your account, your business decides what we work on, and we process that information to provide the services you signed up for. We also make our own decisions about information needed to run accounts, secure the service, support you and meet our legal obligations.

Depending on the services you use, we process:

• account and contact information, such as names, email addresses, phone numbers, roles and sign-in identifiers;
• business and financial information, such as entity details, bank and card transactions, balances, invoices, bills, customers, vendors and financial statements;
• payroll and employment information about your employees and contractors, such as names, addresses, taxpayer identification numbers, withholding elections, pay, hours and the bank details used to pay them;
• tax information, such as sales tax registrations and filings, payroll tax filings, notices you forward to us, and, if you add tax return services, the documents needed for those returns;
• data from services you connect, such as bank-data providers, payment processors, point-of-sale systems and online marketplaces including Amazon (see section 8);
• messages, documents, approvals and signatures you send us; and
• technical information, such as IP address, browser and device details, and logs of how the service is used.

We use information only to:

• keep your books, run your payroll, prepare and file payroll and sales tax returns, handle notices, and provide any tax return services you add;
• set up and administer your account and the people who can access it;
• communicate with you in writing about your account and your work;
• secure, maintain, troubleshoot and improve the service;
• detect and prevent fraud, abuse and unauthorized access; and
• comply with tax, payroll, recordkeeping and other legal obligations.

We do not sell personal information, and we do not share it for advertising. Texas CPA rules require your written permission before the accounting team shares your information with an outside provider; you give it in your engagement letter, and you can withdraw it in writing. We share information only as needed to provide the service or as the law requires, with:

• the accounting team and Florink, which work together to provide the service;
• government agencies, when we file payroll or sales tax returns, schedule tax payments or respond to notices for you;
• the service providers in section 5, under written contracts that require confidentiality and security and limit their use to providing services to us;
• your own advisers, such as an outside CPA, when you ask us to;
• courts, regulators, the Texas State Board of Public Accountancy, peer reviewers or law enforcement when the law or professional rules require it; and
• a successor in a merger, financing or sale of Florink, under confidentiality protections. The accounting team's client files do not move to another CPA firm without your written consent.

These are the providers we use today. We tell you at least 30 days before we start using a new type of provider.

• Google Cloud: hosting, database, file storage and sign-in. Your books, payroll records and documents are stored in the United States.
• Stripe: billing. Stripe may process billing information outside the United States.
• Plaid: bank and card connections. Plaid stores data in the United States and may process it in other countries.
• Resend: email notices from the app.
• Microsoft: the accounting team's email.
• Telnyx: text messages, such as sign-in codes and urgent notices, when turned on.
• Anthropic, OpenAI and Google: AI processing for the tasks in section 6.
• Providers' own staff or subcontractors may process or access information in other countries under their confidentiality and security terms. Income tax return information is never disclosed to a provider outside the United States without your separate signed consent.

Some of our work is done by AI agents that we run and supervise, such as reading a bank statement, sorting transactions, preparing a payroll draft or drafting a reply to your question.

These agents work under our control. They act only on the account they are assigned to, with the same access limits as our team, and a person on the accounting team reviews every return, tax payment and payroll amount before it is filed or paid, and every answer before it is sent to you. Information is sent to an AI provider only as needed to complete the task, and we use AI providers whose business terms do not allow them to use our customers' data to train their models.

AI agents do not make decisions about you that have legal or similarly significant effects without review by a person.

We use administrative, technical and organizational safeguards designed for financial and payroll information. Information is encrypted in transit and at rest. Access is limited by role to the team members and AI agents assigned to your account.

No system is perfectly secure. If we learn that your information was accessed or acquired without authorization, we notify you without unreasonable delay and give the notices the law requires.

If you connect an Amazon Seller Central account or another online marketplace, we receive data through that marketplace's official interface, such as Amazon's Selling Partner API, only after you authorize it. Our Amazon integration is in development; this section describes how we will handle that data.

• Purpose limitation. We use marketplace data only to keep your books, reconcile your payouts and handle your sales tax. We do not use it for any other purpose, including marketing, profiling or building products for anyone else.
• Only what we need. We request only the access needed for those purposes, starting with financial and accounting data such as settlement reports, fees, refunds and reimbursements. We do not request buyers' personal information. If a task ever required it, we would request the restricted access only with the marketplace's approval and yours, and keep it no longer than the marketplace's policy allows.
• No sale or sharing. We never sell marketplace data and never share it with third parties, except where the law requires and except the service providers that process it for us: our hosting providers, and the AI providers our agents use to complete your tasks (section 6). Their contracts limit them to providing services to us, require confidentiality, and do not allow them to use the data to train their models.
• Encryption. Marketplace data is encrypted in transit (TLS 1.2 or higher) and at rest.
• Access control. Access is limited to the team members and AI agents assigned to your account, with individual sign-ins and role-based permissions.
• Retention and deletion. We keep marketplace data while your account is open and only as long as needed for your service and the records tax law requires. When you disconnect the marketplace, ask us to delete the data, or close your account, we stop collecting it and delete what we hold within 30 days, including backup copies, except records we are legally required to keep, which we delete when that period ends.
• Incident notification. If we detect a security incident involving marketplace data, we will notify Amazon (or the relevant marketplace) within 24 hours of detection, as its policies require, and notify you without undue delay.

We keep information while your account is open. After your service ends you keep read-only access and can export your records for at least 90 days; we then delete your data from the app, except what the law or professional rules require us to keep, such as payroll tax records and the accounting team's copies of the returns it filed. Copies may remain in protected backups for a limited time before they are overwritten. Marketplace data is the exception: it is deleted from backups too, within the 30 days described in section 8.

florink.com does not use advertising cookies. When you follow a sign-up link, the site keeps the campaign tags and referring site in your browser's session storage so we can tell which channel brought you; it does not record the page you came from. The Florink app uses cookies to keep you signed in and remember your settings.

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to object to or limit certain processing. Email us to make a request. We may need to verify your identity and authority first. Some records cannot be deleted while the law requires us to keep them.

If you are an employee or contractor of a Florink customer, you may contact your employer or us; we will work with your employer to respond.

Florink is a service for businesses and is not directed to children. We process information about a child only when a customer provides it for a payroll, benefits or tax purpose.

We will post any changes here and update the date above. If a change is material, we will tell you in writing at least 30 days before it takes effect.

Questions about this Policy? Email Florink Inc. at support@florink.com.