1. Who we are
ChaseFlow is an AI-powered invoice chasing service for UK freelancers and small businesses, operated by WealthFlow Agents. Our website is chaseflow.co.uk and our app is at app.chaseflow.co.uk. You can contact us at hello@chaseflow.co.uk.
2. What data we collect
Account data: Your email address, used to sign you in via a magic link (no password is stored).
Invoice data: Information you enter about your invoices — client name, client email address, invoice amount, due date, invoice title, payment instructions, and optionally a Stripe payment link. This is the core data ChaseFlow needs to operate.
Uploaded files: If you upload a PDF, image, or document of your invoice for AI auto-fill, the file is stored in our secure cloud storage and attached to reminder emails sent on your behalf. Files are automatically deleted when you mark an invoice as paid or delete it.
Usage data: We use Google Analytics to understand how visitors use our marketing website (aggregated, anonymised). No personal browsing data is shared with third parties for advertising.
3. How we use your data
- To send automated payment reminder emails to your clients on your behalf
- To allow you to manage and track your outstanding invoices
- To authenticate you securely via magic link
- To process your subscription payment via Stripe
- To improve the service through anonymised usage analytics
We do not sell your data. We do not use your data for advertising. Your clients' contact details are used solely to send the reminder emails you authorise.
4. AI processing
When you upload an invoice file or request an AI-drafted reminder email, the relevant content is sent to OpenAI's API for processing. OpenAI processes this data in accordance with their data processing agreement. We do not use your data to train AI models. Extracted invoice data is only stored in your ChaseFlow account.
5. Who we share data with
We use the following third-party services, each acting as a data processor under our instruction:
- Supabase — database and file storage (EU region)
- Resend — transactional email delivery
- OpenAI — AI email drafting and invoice data extraction
- Stripe — subscription payment processing
- Vercel — web application hosting
- Google Analytics — anonymised website analytics (marketing site only)
We do not share your data with any other third parties.
6. Data retention
- Invoice data: Retained while your account is active. Deleted when you delete the invoice or close your account.
- Uploaded files: Automatically deleted when the invoice is marked paid or deleted.
- Reminder logs: Retained for 12 months then automatically purged.
- Account data: Retained until you request deletion.
7. Your rights (UK GDPR)
As a UK data subject you have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and all associated data
- Portability — receive your data in a machine-readable format
- Object — object to processing in certain circumstances
To exercise any of these rights, email us at hello@chaseflow.co.uk. We will respond within 30 days.
8. Cookies
Our marketing website uses cookies for Google Analytics (anonymised). Our app uses a session cookie to keep you signed in. No advertising or tracking cookies are used.
9. Security
All data is transmitted over HTTPS. Invoice files are stored in a private, access-controlled storage bucket — they are never publicly accessible. We use Supabase Row Level Security to ensure users can only access their own data.
10. Changes to this policy
We may update this policy as the service evolves. Material changes will be communicated by email. Continued use of ChaseFlow after changes constitutes acceptance of the updated policy.
11. Contact
Questions or concerns? Email hello@chaseflow.co.uk.