Legal

Privacy Policy

Last Updated: August 14, 2026

ERP Invoice Flow ("ERP Invoice Flow," "we," "us," or "our") is a software service operated by an individual located in the State of Texas, United States.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://erpinvoiceflow.com/, contact us, receive communications from us, purchase or use our products and services, or otherwise interact with ERP Invoice Flow.

It also explains certain privacy rights that may be available to you under applicable laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the Texas Data Privacy and Security Act ("TDPSA"), and the European Union General Data Protection Regulation ("GDPR").

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information we process in connection with:

  • Our website;
  • Demo requests and other inquiries;
  • Customer accounts;
  • Marketing and business communications;
  • Purchases and subscriptions;
  • The ERP Invoice Flow service;
  • Vendor and invoice information processed through the service; and
  • Website analytics, security, fraud prevention, and related technologies.

For information that customers submit to ERP Invoice Flow for processing as part of the service, such as vendor invoices, we generally process that information on behalf of the customer. In those circumstances, the customer determines why and how the information is processed, and ERP Invoice Flow generally acts as a service provider or data processor.

For information we collect directly for our own purposes, such as website visitor information, demo requests, account information, billing information, and marketing contacts, ERP Invoice Flow generally acts as the business or data controller.

2. Personal Information We Collect

Contact and Business Information

We may collect:

  • Name;
  • Email address;
  • Company name;
  • Vendor name;
  • Job title or role;
  • ERP system;
  • Approximate invoice volume; and
  • Information you provide when requesting a demo, contacting us, or communicating with us.

Account Information

If you use the ERP Invoice Flow service, we may collect information associated with your account, including:

  • Name;
  • Business email address;
  • Company;
  • Login or authentication information;
  • User permissions;
  • Account activity; and
  • Other information necessary to administer and secure your account.

Passwords or authentication credentials may be managed through third-party identity and authentication providers rather than stored directly by ERP Invoice Flow.

Invoice and Vendor Data

ERP Invoice Flow processes invoices and related accounts-payable information on behalf of customers. This information may include:

  • Vendor names;
  • Vendor contact information;
  • Invoice numbers;
  • Purchase order numbers;
  • Invoice dates;
  • Payment terms;
  • Product or item information;
  • Quantities;
  • Prices;
  • Taxes;
  • Freight or shipping charges;
  • Invoice totals;
  • Billing or remittance addresses;
  • Payment or banking information appearing on invoices;
  • Vendor account numbers;
  • Customer account numbers; and
  • Other information contained within invoices or related documents.

Invoices may occasionally contain personal information about employees, vendor representatives, sole proprietors, or other individuals. Customers are responsible for ensuring that information submitted to ERP Invoice Flow is collected and provided to us lawfully.

Payment and Transaction Information

When you purchase a product or service from us, payment information may be processed by third-party payment service providers. We may receive and retain information relating to the transaction, such as:

  • Customer or company name;
  • Billing contact information;
  • Billing address;
  • Amount charged;
  • Subscription or plan information;
  • Payment status;
  • Transaction identifiers; and
  • Limited payment-method information provided by the payment processor.

Payment providers process payment information according to their own privacy policies and security requirements.

Website and Device Information

When you visit our website, we and our service providers may automatically collect information such as:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Referring website;
  • Pages viewed;
  • Date and time of visits;
  • Approximate geographic location derived from an IP address;
  • Website interactions;
  • Cookie identifiers; and
  • Other technical information about your use of the website.

3. How We Use Personal Information

We may use personal information to:

  • Provide, operate, maintain, and improve ERP Invoice Flow;
  • Process invoices and related business records on behalf of customers;
  • Extract and validate invoice information;
  • Match invoices with vendor, purchase order, receipt, or ERP information;
  • Import or transmit invoice information into supported ERP systems;
  • Create and manage customer accounts;
  • Authenticate users and protect accounts;
  • Provide customer support;
  • Respond to demo requests and inquiries;
  • Communicate with customers and prospective customers;
  • Process payments and manage subscriptions;
  • Send service-related notifications;
  • Send marketing and promotional communications;
  • Measure website traffic and understand how visitors use our website;
  • Detect spam, abuse, fraud, or unauthorized activity;
  • Maintain security and troubleshoot technical problems;
  • Enforce our agreements;
  • Comply with legal obligations; and
  • Establish, exercise, or defend legal claims.

We do not use customer invoice data to train shared or publicly available artificial intelligence models.

4. Artificial Intelligence and Automated Processing

ERP Invoice Flow uses automated technologies, including artificial intelligence, to analyze invoice documents and extract information from them.

These systems may identify information such as vendors, invoice numbers, purchase orders, dates, line items, quantities, pricing, taxes, freight, and totals.

Automated processing is used to perform the service requested by our customers. ERP Invoice Flow is not designed to make decisions about individuals relating to employment, credit, insurance, housing, healthcare, education, or other similarly significant matters.

Customer invoice information is not used to train shared or public artificial intelligence models.

5. Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics may collect information such as:

  • IP address;
  • Device information;
  • Browser information;
  • Pages visited;
  • Referring pages or websites;
  • Approximate geographic information; and
  • Interactions with our website.

Google Analytics may use cookies and similar technologies to provide these services. Where applicable law requires consent before non-essential analytics technologies are used, we will obtain or honor the required consent.

You may also be able to limit analytics collection through browser settings, cookie controls, or tools provided by Google.

6. Google reCAPTCHA

We use Google reCAPTCHA to help protect our website, forms, and services from spam, fraud, abuse, and automated activity.

reCAPTCHA may collect or evaluate information about your device and interaction with our website for security and risk-analysis purposes. This may include IP address, browser information, device information, cookies, and information about how you interact with a webpage.

Your use of reCAPTCHA is also subject to Google's applicable Privacy Policy and Terms of Service.

7. Cookies and Similar Technologies

ERP Invoice Flow and our service providers may use cookies and similar technologies for:

  • Website functionality;
  • Authentication;
  • Security;
  • Fraud and abuse prevention;
  • Remembering preferences;
  • Website analytics; and
  • Measuring website performance.

We do not use cookies to display third-party advertisements on ERP Invoice Flow.

Where required by applicable law, non-essential cookies or similar technologies will be used only after any required consent has been obtained.

You may control cookies through your browser settings and, where available, through cookie controls provided on our website. Disabling certain cookies may affect website functionality.

8. Marketing Communications

We may use your name, email address, company information, and other business contact information to send information about ERP Invoice Flow, including:

  • Product announcements;
  • Promotional offers;
  • Product updates;
  • Demo invitations;
  • Educational information; and
  • Other marketing communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism contained in the email.

We may retain limited information about your opt-out request so that we can honor your preference in the future. Unsubscribing from marketing communications will not prevent us from sending transactional or service-related communications necessary to provide a product or service you have requested.

Where applicable law requires consent before sending marketing communications, we will rely on consent or another lawful basis permitted by applicable law.

9. How We Disclose Personal Information

We may disclose personal information to third parties when reasonably necessary to operate our business and provide our services.

Service Providers

We may use third parties to provide:

  • Cloud hosting and infrastructure;
  • Artificial intelligence and document-processing services;
  • Database and data-storage services;
  • Email delivery;
  • Customer communications;
  • Authentication and identity management;
  • Payment processing;
  • Website analytics;
  • Security and fraud prevention;
  • Error monitoring;
  • Technical support; and
  • Other services necessary to operate ERP Invoice Flow.

These providers may process personal information only as permitted by their agreements with us and applicable law.

Google

We use Google services including Google Analytics and Google reCAPTCHA. Information may therefore be transmitted to or processed by Google in connection with those services.

Customers and Customer-Directed Integrations

Information processed through ERP Invoice Flow may be disclosed to the customer that submitted the information and to systems or integrations authorized by that customer, including ERP systems.

Legal and Safety Purposes

We may disclose personal information when we reasonably believe disclosure is necessary to:

  • Comply with applicable law;
  • Respond to a subpoena, court order, or lawful governmental request;
  • Protect our legal rights;
  • Investigate fraud or security incidents;
  • Protect the safety or security of ERP Invoice Flow, our customers, or others; or
  • Establish, exercise, or defend legal claims.

Business Transfers

If ERP Invoice Flow or substantially all of its business or assets are sold, transferred, reorganized, or acquired, personal information may be transferred as part of that transaction, subject to applicable law.

10. Sale and Sharing of Personal Information

ERP Invoice Flow does not sell personal information for monetary consideration.

We do not operate an advertising network and do not display third-party advertisements on our website.

We do not use personal information for cross-context behavioral advertising. Based on our current business practices, we do not knowingly sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

We may disclose personal information to service providers, processors, analytics providers, and other parties that help us operate ERP Invoice Flow, as described in this Privacy Policy.

If our practices change in a way that creates a right to opt out of the sale or sharing of personal information under applicable law, we will provide the required notice and opt-out mechanism.

11. Customer Invoice Data

Customers retain ownership and control of the invoice and business data they submit to ERP Invoice Flow, subject to the applicable service agreement.

We process customer invoice information for purposes such as:

  • Extracting invoice information;
  • Validating extracted information;
  • Matching vendors and purchase orders;
  • Processing invoices;
  • Integrating invoice data with ERP systems;
  • Troubleshooting;
  • Security;
  • Providing customer-requested support; and
  • Other purposes necessary to provide the service.

Customer data is logically separated between customers and is protected using technical and organizational security measures.

Invoice data is retained according to the applicable customer's settings, instructions, service agreement, and our legal obligations.

If you are an individual whose information appears in an invoice or other data submitted by one of our customers, the customer is generally responsible for responding to requests concerning that information. You should normally submit your privacy request directly to the organization that provided your information to ERP Invoice Flow.

We will assist our customers in responding to valid privacy requests when required.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Provide our services;
  • Maintain customer accounts;
  • Meet contractual obligations;
  • Maintain business and financial records;
  • Comply with legal requirements;
  • Resolve disputes;
  • Prevent fraud or abuse;
  • Enforce agreements; and
  • Protect our legal rights.

Customer invoice information may be retained according to retention settings selected by the customer or according to the applicable service agreement.

Marketing contact information may be retained until you unsubscribe or we determine that it is no longer needed. We may retain an email address or other limited information after an unsubscribe request when necessary to maintain a suppression list and ensure that we honor the request.

Backup copies may remain for a limited period after information is deleted from active systems.

13. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include:

  • Encryption in transit;
  • Encryption at rest;
  • Authentication and access controls;
  • Tenant isolation;
  • Restricted administrative access;
  • Logging and monitoring;
  • Secure cloud infrastructure; and
  • Procedures designed to prevent unauthorized access, disclosure, alteration, or destruction of information.

No internet transmission, cloud service, or electronic storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

14. International Data Transfers

ERP Invoice Flow is operated from the United States, and personal information may be processed or stored in the United States or other countries in which our service providers operate.

Privacy and data-protection laws in these countries may differ from those in your country of residence.

When applicable law requires specific safeguards for international transfers of personal information, we will use legally recognized transfer mechanisms or other safeguards as required.

15. Your Privacy Rights

Depending on where you live and the laws that apply to ERP Invoice Flow's processing of your personal information, you may have the right to:

  • Confirm whether we process your personal information;
  • Request access to personal information we maintain about you;
  • Request correction of inaccurate information;
  • Request deletion of personal information;
  • Obtain a copy of certain personal information in a portable format;
  • Object to certain processing;
  • Restrict certain processing;
  • Opt out of certain uses of personal information;
  • Withdraw consent where processing is based on consent; and
  • Appeal certain decisions concerning a privacy request where applicable.

We will not discriminate against you for exercising a privacy right provided by applicable law. We may need to verify your identity before completing certain requests.

To submit a privacy request, contact us through https://erpinvoiceflow.com/#book-a-demo. Please indicate in your message that you are submitting a Privacy Request and describe the request you would like us to process.

16. California Privacy Rights — CCPA and CPRA

This section applies to California residents to the extent ERP Invoice Flow is subject to the CCPA/CPRA.

Categories of Personal Information

Depending on your interaction with ERP Invoice Flow, we may collect the following categories of personal information:

Identifiers

  • Name;
  • Email address;
  • IP address;
  • Account identifiers; and
  • Similar identifiers.

Commercial Information

  • Products or services purchased;
  • Subscription information;
  • Transaction information; and
  • Customer relationship information.

Internet or Electronic Network Activity

  • Website activity;
  • Browser information;
  • Device information;
  • Cookie identifiers;
  • Referring websites; and
  • Interactions with our website.

Professional or Employment-Related Information

  • Company name;
  • Job role;
  • Business email address;
  • Vendor information; and
  • Other professional information.

Financial and Invoice Information

  • Invoice information;
  • Purchase order information;
  • Pricing;
  • Payment terms;
  • Transaction information; and
  • Other financial information contained in documents submitted to the service.

Sensitive Personal Information

Certain invoices may contain information classified as sensitive personal information under California law, such as financial-account information.

We use sensitive personal information only as reasonably necessary to provide and secure the requested service, comply with law, or perform other purposes permitted by applicable law. We do not use sensitive personal information to infer characteristics about individuals for advertising or unrelated purposes.

Sources of Personal Information

We may receive personal information:

  • Directly from you;
  • From your employer or organization;
  • From our customers;
  • From vendors whose invoices are submitted to the service;
  • Automatically when you use our website or services; and
  • From service providers that assist us in operating ERP Invoice Flow.

California Consumer Rights

Subject to applicable exceptions, California residents may have the right to:

  • Know the categories and specific pieces of personal information collected about them;
  • Access personal information;
  • Delete personal information;
  • Correct inaccurate personal information;
  • Opt out of the sale or sharing of personal information;
  • Limit certain uses or disclosures of sensitive personal information; and
  • Receive equal treatment without unlawful discrimination for exercising privacy rights.

ERP Invoice Flow does not currently sell personal information or share personal information for cross-context behavioral advertising.

California residents may submit requests through https://erpinvoiceflow.com/#book-a-demo. Please identify the request as a California Privacy Request.

Where permitted by law, an authorized agent may submit a request on behalf of a California resident. We may request information necessary to verify the consumer's identity, the authorized agent's authority, or both.

17. Texas Privacy Rights

This section applies to Texas residents where the Texas Data Privacy and Security Act applies to our processing.

Subject to applicable limitations and exceptions, Texas residents may have the right to:

  • Confirm whether we process their personal data;
  • Access their personal data;
  • Correct inaccuracies;
  • Delete personal data provided by or obtained about them;
  • Obtain a portable copy of certain personal data;
  • Opt out of targeted advertising;
  • Opt out of the sale of personal data; and
  • Opt out of certain profiling involving significant decisions.

ERP Invoice Flow does not currently sell personal data or use personal data for targeted advertising.

If a Texas resident submits a valid privacy request and disagrees with our decision, the resident may ask us to reconsider the decision by submitting another request and clearly identifying it as a Privacy Request Appeal.

Privacy requests and appeals may be submitted through https://erpinvoiceflow.com/#book-a-demo.

Please note that certain small businesses are exempt from many requirements of the Texas Data Privacy and Security Act. Nothing in this section is intended to waive an exemption or impose legal obligations on ERP Invoice Flow that would not otherwise apply.

18. European Economic Area and GDPR Rights

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to applicable exceptions:

  • The right to access your personal data;
  • The right to correct inaccurate or incomplete personal data;
  • The right to request deletion of personal data;
  • The right to restrict processing;
  • The right to object to processing;
  • The right to data portability;
  • The right to withdraw consent at any time where processing is based on consent; and
  • The right to lodge a complaint with the applicable data-protection supervisory authority.

Legal Bases for Processing

Performance of a Contract

We may process personal data when necessary to provide ERP Invoice Flow, administer customer accounts, process transactions, provide support, or fulfill contractual obligations.

Legitimate Interests

We may process personal data when necessary for legitimate business interests, such as:

  • Operating and improving ERP Invoice Flow;
  • Responding to business inquiries;
  • Securing our systems;
  • Preventing fraud;
  • Understanding how our website is used; and
  • Marketing our services where permitted by law.

We consider the impact on individuals' privacy rights when relying on legitimate interests.

Consent

We may rely on consent for:

  • Certain marketing communications;
  • Non-essential cookies or analytics where required; or
  • Other processing where applicable law requires consent.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

Legal Obligations

We may process personal data when necessary to comply with applicable legal, tax, accounting, regulatory, or law-enforcement obligations.

Customer Data Under the GDPR

When an ERP Invoice Flow customer submits invoice data containing personal data, the customer will generally be the data controller, and ERP Invoice Flow will generally act as the customer's data processor.

Individuals seeking to exercise GDPR rights concerning information contained in customer invoice data should normally contact the applicable customer directly. ERP Invoice Flow will assist customers with applicable GDPR obligations as required by law and applicable agreements.

Complaints

If GDPR applies to you, you may have the right to lodge a complaint with the data-protection authority responsible for your country or region.

We encourage you to contact us first so that we have an opportunity to address your concern.

19. Global Privacy Control and Do Not Track

Some browsers and browser extensions support privacy preference signals such as Global Privacy Control ("GPC").

Where applicable law requires us to recognize a legally valid browser-based privacy preference signal, we will honor that signal as required.

Because ERP Invoice Flow does not currently sell personal information or use personal information for cross-context behavioral advertising, there is currently no sale or advertising-related sharing from which to opt out based on our stated practices.

Some browsers also offer a "Do Not Track" setting. Because there is not a universally adopted standard governing all Do Not Track signals, our website may not respond separately to those signals unless required by applicable law.

20. Children's Privacy

ERP Invoice Flow is a business-to-business service and is not intended for children.

We do not knowingly solicit or collect personal information directly from children under 13. If we learn that we have collected personal information directly from a child in violation of applicable law, we will take reasonable steps to delete it.

21. Third-Party Websites and Services

Our website or service may contain links to third-party websites, services, ERP platforms, or other resources.

We are not responsible for the privacy practices, security, or content of third parties. Their collection and use of information are governed by their own privacy policies and terms.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, data-processing practices, technology, service providers, or applicable legal requirements.

When we make changes, we will update the Last Updated date at the top of this Privacy Policy. If required by applicable law, we will provide additional notice of material changes.

23. Contact Us

If you have questions about this Privacy Policy or would like to exercise an applicable privacy right, contact ERP Invoice Flow at:

https://erpinvoiceflow.com/#book-a-demo

When submitting a privacy-related request, please include "Privacy Request" in your message and provide enough information for us to understand and respond to your request.

ERP Invoice Flow
Texas, United States