Privacy Policy

Last updated: March 5, 2026

Cherub Solutions LLC ("we," "us," or "our") operates ClientFlow. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Information You Provide

Account information: Name, email address, firm name, and role when you register
Client data: Personal and financial information you enter about your clients, including names, addresses, Social Security numbers, dates of birth, and financial profiles
Communications: Messages and correspondence sent through the Service

Information Collected Automatically

Usage data: Pages visited, features used, and actions taken within the Service
Device information: Browser type, operating system, and device identifiers
Log data: IP address, access times, and referring URLs

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process transactions and manage your account
Send service-related communications and notifications
Ensure security and prevent fraud
Comply with legal obligations
Generate anonymized, aggregate analytics

3. Data Security

We implement industry-standard security measures to protect your data, including:

AES-256-GCM encryption for sensitive personally identifiable information (SSN, date of birth)
Row-level security ensuring data isolation between firms
HTTPS/TLS encryption for all data in transit
Role-based access controls within the application
Audit logging of data access and modifications

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using commercially reasonable measures.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

Service providers: Third-party vendors who assist in operating the Service (hosting, email delivery, payment processing), bound by confidentiality obligations
Legal compliance: When required by law, regulation, or legal process
Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we retain data for thirty (30) days to allow export, after which it is permanently deleted. We may retain certain data longer where required by law or for legitimate business purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Object to or restrict certain processing
Withdraw consent where processing is consent-based

To exercise these rights, contact us at privacy@cherubsolutions.com.

7. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies.

8. Third-Party Services

The Service may integrate with third-party platforms (e.g., CRM systems, e-signature providers) at your direction. These integrations are governed by the respective third party's privacy policies. We encourage you to review them.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete the data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

For questions or concerns about this Privacy Policy, contact us at:

Cherub Solutions LLC
privacy@cherubsolutions.com