Privacy Policy

Last updated: 11 July 2026

1. Information We Collect

CashBook by Manual2AI collects the following information to provide our cash management service:

  • Account Information: Email address, business name, GST number (optional), password (hashed)
  • Financial Data: Cash events, controlled-account legs, obligations, settlements, close counts, bank statement lines, and evidence you enter
  • Usage Data: Pages visited, features used, device type (for improving the product)
  • Team Data: Email addresses and names of team members you invite

2. How We Use Your Data

  • To provide, maintain, and improve the CashBook service
  • To process payments and manage your subscription
  • To send account and billing messages such as verification and password reset emails
  • With separate consent, to prepare reviewable AI receipt-extraction drafts using Google Gemini
  • We do NOT sell your data to third parties

3. Data Storage & Security

Your application data is stored on Supabase. We use tenant and location checks at the server boundary plus Row-Level Security as a second enforcement layer. Connections use TLS. Authentication credentials are managed by Supabase Auth. Evidence is kept in a private storage bucket and served through short-lived, authorized links.

4. AI & Third-Party Services

AI is disabled until an owner explicitly consents, and disabling it does not block the rest of the product. When a user requests receipt extraction, the selected receipt image and extraction prompt are sent to Google Gemini. The run records its source, model, prompt version, confidence, timestamp, and approval state. Raw AI run input metadata and output are retained for 30 days. We also use Resend for account emails and Cashfree for prepaid payment processing.

5. Your Rights

  • Access: You can view all your data in the app at any time
  • Export: Download a versioned accountant package from Reports
  • Deletion: Request complete account and data deletion by emailing support@manual2ai.com
  • Correction: Correct committed financial events with a linked reversal and replacement; committed history is not overwritten

6. Data Retention

We retain business data while the account exists, including when paid access expires. If you request deletion, we will process the request subject to legal, fraud-prevention, backup, and financial-record retention obligations. Raw AI run data expires after 30 days. Unlinked draft evidence is cleaned up after 24 hours.

7. Contact

For privacy questions or data deletion requests, contact us at support@manual2ai.com.

Back to CashBook