
CashPulse
Privacy Policy
Effective date: July 15, 2026 · Gabriel & Associates LLC · Last reviewed: June 2026
1. Who We Are
CashPulse is a done-for-you bookkeeping client portal operated by Gabriel & Associates LLC ("we," "us," or "our"), located in the United States. This policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.
2. Information We Collect
- Account information — name, email address, and business name provided at sign-up or by your bookkeeper when setting up your client profile.
- Financial records — expense entries, income records, invoices, bill payments, and bank statement data you or your bookkeeper upload or enter into the platform.
- Uploaded documents — receipts, bank statements, tax documents, and other files you upload to your document folders.
- Usage data — pages visited, features used, and actions taken (recorded in our audit log for security and compliance purposes).
- Bank connection data (when enabled) — read-only transaction data retrieved via Plaid from linked financial accounts. We never store your bank login credentials, and no money can be moved through CashPulse.
- Billing information — when you subscribe, payment is processed by Stripe. We store only a Stripe customer ID — we never see or store your full card number.
3. How We Use Your Information
- Provide and improve the CashPulse bookkeeping portal and reports.
- Share your financial summaries and reports with your bookkeeper (Gabriel & Associates LLC).
- Process subscription payments via Stripe.
- Send email notifications about published reports, consultation confirmations, and service updates.
- Generate AI-powered insights and help desk responses (when enabled); your data is sent to Anthropic's API under their data processing terms.
- Maintain audit logs for security and fraud prevention.
- Comply with legal obligations and prevent unauthorized access.
4. Data Sharing
We do not sell your personal information. We share data only with:
- Your bookkeeper — Gabriel & Associates LLC has full access to your financial data to perform bookkeeping services.
- Auth0 — handles user authentication. Auth0 processes your email address and login activity under its own privacy policy.
- Stripe — processes subscription payments. Stripe may collect your billing name, email, and payment card details under its own privacy policy. We receive only a customer token — never your card number.
- Plaid (if you connect a bank account) — provides read-only access to bank transactions under its own privacy policy.
- Anthropic (if AI features are enabled) — your help desk queries and document data may be sent to Anthropic's API under their privacy policy.
- Our hosting provider (SKC Technologies) — operates the server infrastructure on which CashPulse runs.
- Legal authorities — if required by law, subpoena, court order, or to protect the rights and safety of our users.
5. Data Security
Your documents and financial data are stored on infrastructure operated by SKC Technologies on behalf of Gabriel & Associates LLC. All data is transmitted over HTTPS. Access requires authenticated login protected by Auth0. Uploaded files are stored server-side and are not publicly accessible. Bank feeds use Plaid's read-only access — your credentials are never stored on our servers.
6. Data Retention
We retain your financial records for a minimum of seven years to meet standard bookkeeping and tax compliance requirements. Account and profile information is retained for as long as your account is active. You may request deletion of your account at any time (see Section 7 below) — note that deletion of financial records may not be possible where retention is required by law.
7. Your Rights — Right to Access, Correct, and Delete
Right to erasure (right to be forgotten): You may request deletion of your personal account data by emailing us at info@tfg-trinity-financial-group.org. We will respond within 30 days. Financial records required for tax or legal compliance may be retained in anonymized or archived form.
You also have the right to:
- Access — request a copy of the personal information we hold about you.
- Correct — request correction of inaccurate information.
- Portability — request an export of your financial records in a standard format.
- Restrict processing — request that we limit how we use your data in certain circumstances.
To exercise any of these rights, email info@tfg-trinity-financial-group.org.
8. California Residents — CCPA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- Right to Know — you may request a list of the categories and specific pieces of personal information we have collected about you in the past 12 months, including the sources, business purposes, and third parties with whom it was shared.
- Right to Delete — you may request deletion of personal information we have collected, subject to legal retention requirements.
- Right to Opt-Out of Sale — we do not sell personal information. No opt-out is needed, but you may confirm this at any time by contacting us.
- Right to Non-Discrimination — we will not discriminate against you for exercising any CCPA right.
To submit a CCPA request, email info@tfg-trinity-financial-group.org with the subject line "CCPA Request." We will verify your identity and respond within 45 days.
9. Cookies
We use the following cookies on CashPulse:
- cashpulse.auth — a single encrypted, HTTP-only session cookie that keeps you logged in. It expires after 7 days of inactivity. This cookie is strictly necessary for the service to function.
- Auth0 cookies — during the login process, Auth0 may set cookies in the
auth0.com domain to manage the authentication session. These are cleared after login completes.
We do not use advertising cookies, tracking pixels, or third-party analytics scripts. You can block cookies in your browser settings, but doing so will prevent you from logging in.
10. Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify you by email within 72 hours of becoming aware of the breach, where feasible, and take prompt steps to contain and investigate the incident.
11. Children's Privacy
CashPulse is a business-to-business service and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice in the portal at least 30 days before the change takes effect. Continued use of CashPulse after the effective date constitutes acceptance of the updated policy.
13. Contact
Questions about this policy, or to exercise any of your rights?
We aim to respond within 5 business days.
← Back to CashPulse