Privacy Policy
Effective November 14, 2026
FlowState is a Google Sheets add-on that brings your bank activity into a spreadsheet you own. Your financial data lives in your own Google spreadsheet. FlowState does not keep a database of it.
What FlowState handles, and where it lives
| Data | Where it is stored | Why |
|---|---|---|
| Transactions, balances, holdings, budgets | Your Google spreadsheet, in your Google account | To show your finances in your sheet |
| Bank connection tokens | Your spreadsheet's private add-on settings | To refresh your data when you sync |
| Your Google account email | Not stored by FlowState | To send the optional weekly summary to you, from your own account |
| License key | Your Google account's private add-on settings | To unlock live bank data |
| Name, email and payment details | Lemon Squeezy, our payment provider | To bill your subscription |
Bank connections and Plaid
FlowState uses Plaid Inc. to connect to your bank. You sign in to your bank inside Plaid's window; FlowState never sees or stores your bank username or password. By connecting an account, you agree to Plaid's End User Privacy Policy.
The FlowState service
When you use live bank data, requests to Plaid pass through FlowState's server, which adds FlowState's credentials and checks your license. Your financial data passes through it in transit and is not stored. The server's own logs record only the type of request, the time and the result, never bank data or connection tokens. Our hosting provider, Google Cloud, keeps standard request logs (such as IP address and time) for up to 30 days.
Google user data
FlowState asks Google only for what it needs: to read and write the spreadsheet you use it in, to copy the FlowState template into it, to connect to Plaid and the FlowState service, to run scheduled syncs you turn on, and to email your weekly summary to you. FlowState's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we never do
We do not sell your data, share it for advertising, or use it to train AI models. No one at FlowState can see your spreadsheet unless you share it with them.
Your choices
- Unlink a bank from the FlowState panel at any time. This also ends the connection at Plaid.
- Uninstall the add-on from Extensions, then Add-ons, then Manage add-ons. Your spreadsheet stays yours to keep or delete.
- To delete your billing records, email us. Lemon Squeezy may keep some records where tax law requires it.
Security
FlowState's Plaid credentials are kept in Google Secret Manager and are never placed in a spreadsheet. All connections use HTTPS.
Children
FlowState is not intended for anyone under 18.
Changes
If this policy changes, we will update the date above and, for significant changes, tell subscribers by email before they take effect.