Privacy Policy

This policy explains what information Coorfin ("Coorfin", "we", "us") collects when you use our website and product, how we use it, and the choices you have. It applies to visitors of coorfin.com and to organizations and users of the Coorfin application.

Account information: name, work email, company name, job title, and other details you provide when you sign up or that an admin provides when adding you to an organization.

Financial and operational data you enter or connect: transactions, invoices, bills, journal entries, bank feed data, and similar records you create or import to use the product.

Usage data: how you interact with the product and website, collected automatically (e.g. pages visited, actions taken) to help us fix problems and improve the product.

To provide, maintain, and secure the product — including authenticating you, computing your organization's ledger and reports, and enforcing the approval controls your organization configures.

To communicate with you about your account, changes to the service, and, if you opt in, product updates.

To improve Coorfin, including diagnosing and fixing bugs, and understanding which parts of the product are actually useful.

We do not sell your data. We share information only with service providers who host our infrastructure and help us operate the product (for example, our database and application hosting provider), under agreements that limit their use of it to providing that service, or when required by law.

Data in transit between your browser and Coorfin is encrypted (HTTPS/TLS). Access to production data is restricted to what's needed to operate the service. See our Security page for more detail on the controls built into the product itself.

We retain your organization's data for as long as your account is active, and for a reasonable period afterward in case you want to reactivate or export it, unless you ask us to delete it sooner or the law requires a different retention period.

Depending on where you're located, you may have the right to access, correct, export, or request deletion of your personal data. To exercise any of these, contact us using the details below and we'll respond as required by applicable law.

We use a minimal set of cookies necessary to keep you signed in and to remember basic preferences (like your sidebar state). We don't use third-party advertising cookies.

We'll update the date below if this policy changes in a way that affects how we handle your data, and, for material changes, we'll make a reasonable effort to notify account admins directly.