Privacy Policy
Effective date: August 27, 2026
This policy explains what information Business Cash Manager collects, why, and what you can do about it. It covers Business Cash Manager at app.businesscashmanager.com and businesscashmanager.com, operated by Pathway System Solutions LLC ("we", "us", "our").
It covers this product only. Our other products are built differently and handle information differently, so each one publishes its own privacy policy. The current list is at https://www.pathwaysystemsolutions.com/privacy-policy. Please do not read this policy as describing a product it does not name.
The short version
- We do not sell your information, and we never have.
- We do not run advertising trackers, marketing pixels, or third-party analytics in our applications.
- We never see your full card number. Payments are handled by Stripe.
- Every product we offer lets you take your data out and lets you delete it, without asking us.
- Business Cash Manager never connects to your bank. There is no bank login, no linked account, and no imported transactions. Everything in your account is there because you typed it in.
- In Business Cash Manager you can export everything to CSV, or delete all of it, from the Your account page.
The rest of this page is the detail behind those statements.
What we do not collect
We are stating this first because it is unusual, and because it is the part most people assume works the other way.
We do not collect your banking credentials. Business Cash Manager has no bank connection feature. We do not use Plaid, Yodlee, MX, or any other bank aggregation service. We cannot see your bank accounts, we cannot read your transactions, and we cannot move money. There is no username or password for any financial institution stored anywhere in our systems, because we never ask you for one.
We do not collect your full payment card details. When you subscribe, your card is entered directly into Stripe. We receive only a customer reference and the subscription status. The card number never reaches our servers.
We do not run third-party tracking. There is no Google Analytics, no advertising pixel, no session recorder, and no marketing tag in any application we operate.
What we do collect
Account information
When you create an account, an authentication provider collects your name and email address rather than us. For Business Cash Manager that provider is Clerk. It collects your name and email address, and stores your password securely in hashed form. This information is held by Clerk. Our own database does not contain a user record with your name or email in it. Your financial data is linked to an anonymous account identifier issued by Clerk.
The information you enter
This is the substance of the Service, and it is entirely under your control. In Business Cash Manager it includes:
- Cash accounts you set up, including the name you give them, the account type, balances you enter, and any notes
- Bills and receivables, including who they are to or from, amounts, and due dates
- Recorded activity, including payee names, memos, amounts, dates, and category splits
- Categories you create and reserve targets you set
We store this so the Service can show it back to you and calculate projections from it. We do not analyze it for any other purpose, we do not share it, and we do not use it to train anything.
Note that this data is only as sensitive as you make it. The Service does not require you to enter customer names, and many people use generic labels instead.
Payment and subscription information
Stripe processes payments and holds your card details under its own privacy policy. We store a Stripe customer reference and your subscription status so the Service knows whether your account is active. We can see the last four digits of your card, the card brand, and your billing history, as shown in the Stripe dashboard.
Product usage
We record whether you have completed the initial setup steps, so we can tell whether the onboarding process is working and where people get stuck. This is limited to whether a step was finished. It does not include the contents of your accounts, your balances, or any figure you entered.
Technical and log information
Our servers and load balancer record standard technical information for every request, including IP address, browser type, pages requested, timestamps, and error details. We use this to keep the Service running, diagnose problems, and detect abuse such as automated scanning.
These logs are deleted automatically on a fixed schedule. Load balancer request logs, which are the ones containing IP addresses, are deleted after 90 days. Application logs are deleted after 30 days. Neither is kept beyond that, and neither is used for any purpose other than the ones described here.
Support correspondence
If you email us, we keep the message and our reply so we have the history if you write again. Our business email runs on Google Workspace, so correspondence with us is stored there. Please do not send us account numbers, card numbers, or other sensitive details by email. We will never ask you for them.
Cookies
We use only cookies that are strictly necessary for the Service to work. In Business Cash Manager those are:
- Clerk session cookies, which keep you signed in. Without these you would be logged out on every page.
- Stripe cookies on the checkout and billing pages, used by Stripe for fraud prevention.
We do not use advertising cookies, analytics cookies, or cross-site tracking cookies. Because we use only strictly necessary cookies, we do not show a cookie consent banner. If that ever changes, we will add one before the change takes effect.
How we use information
We use the information described above to:
- Provide the Service, including calculating your projections
- Authenticate you and keep your account secure
- Process your subscription and send billing notices and receipts. Sign-in and password emails are sent by Clerk, and billing emails are sent by Stripe.
- Respond when you contact support
- Diagnose errors, monitor performance, and protect against abuse
- Understand whether onboarding is working, using the setup-step information described above
- Comply with legal and tax obligations
We do not use your information for advertising, and we do not build profiles of you for any purpose beyond running the Service.
We do not sell your information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law and the equivalent laws of other states. We have never done so.
Who we share information with
We share information only with the service providers required to operate Business Cash Manager. Each of them is bound to handle it only on our instructions.
| Provider | What it does | What it handles |
|---|---|---|
| Clerk | Authentication | Your name, email, and password |
| Stripe | Payments | Your card details and billing history |
| Amazon Web Services | Hosting and database | All application data, stored in the United States |
| Google Workspace | Business email | Anything you include in an email you send us, and our replies |
Business Cash Manager sends your information to no other outside provider. It uses no bank aggregation service, no analytics or advertising service, and no artificial intelligence service. Nothing you enter into it is sent to a model, and nothing you enter into it is used to train one.
Please do not read the table above as covering another one of our products. A different product may need providers that Business Cash Manager does not. Each product discloses its own providers in its own privacy policy, and the list of them is at https://www.pathwaysystemsolutions.com/privacy-policy.
Beyond these, we may disclose information if we are required to by law, valid legal process, or a government request, or if it is necessary to protect our rights, our customers, or the public. If we receive a legal demand for your data, we will notify you unless we are legally prohibited from doing so.
If the business is ever sold or merged, your information may transfer to the new owner. We would notify you first, and the new owner would remain bound by this policy until you were given notice of any change.
Where your information is stored
All application data is stored in the United States on Amazon Web Services infrastructure. The Service is intended for use by United States businesses. If you access it from elsewhere, you are transferring your information to the United States.
Security
We take the following measures to protect your information in Business Cash Manager:
- All traffic is encrypted in transit using TLS
- Data is encrypted at rest
- The database is not reachable from the public internet. It sits on a private network, accessible only from the application itself.
- Application servers run without public network addresses and reach the internet only through controlled egress
- Access to production systems is limited to those who need it, protected by multi-factor authentication
- Every database query is scoped to the signed-in account, so one customer's data cannot be returned to another
No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any required authority as promptly as the law requires.
How long we keep information
- While your account is active, we keep your data so the Service can show it to you.
- After you cancel, your data stays intact so you can return or export it.
- After you delete your account, your financial data is removed from our production database immediately, your login is deleted at Clerk, and any active subscription is cancelled. Encrypted database backups may retain a copy for up to 7 days before they roll off automatically. Backups are not accessible for ordinary use and are never restored selectively to recover deleted data.
- Billing records are kept as long as tax and accounting law requires, generally seven years. This applies to transaction records, not to your financial data in the Service.
Your rights and choices
These rights are available to everyone who uses the Service, regardless of what state you live in.
- Access. See everything the Service holds about you by signing in.
- Export. Download your data as CSV at any time from inside the Service. This is not restricted to paying subscribers.
- Correct. Edit any information you entered, at any time. Change your name or email from the profile menu in the top navigation.
- Delete. Use Delete your account on the Your account page to remove your account and all of its data. This is permanent.
- Opt out of sale or sharing. Nothing to opt out of, because we do not sell or share your information.
- Non-discrimination. We will not treat you differently for exercising any of these rights.
Most of these you can exercise yourself without contacting us, which is deliberate. If you would rather we handled it, or you want something not listed here, email support@businesscashmanager.com. We respond within 45 days as required by law, and usually within two business days.
You may use an authorized agent to make a request. We will ask for proof that you authorized them.
If you believe we have mishandled your information, you may complain to your state attorney general.
Children
The Service is for business use and is not directed at children. We do not knowingly collect information from anyone under 13. If we learn that we have, we will delete it. Account holders must be at least 18.
Changes to this policy
We may update this policy. If a change materially affects how we handle your information, we will notify you by email or through the Service at least 30 days before it takes effect. The effective date at the top of this page is always current.
Contact
Questions about privacy, or requests about your information:
Pathway System Solutions LLC 2246 Winchester Road NE, Suite 300 #208 Huntsville, AL 35811 support@businesscashmanager.com
Portions adapted from the Basecamp open-source policies, used under CC BY 4.0.