Privacy Policy
Effective November 15, 2026
FlowState is a Google Sheets add-on made by FlowStateSheets LLC, a Georgia limited liability company ("FlowState", "we"). It brings your bank activity into a spreadsheet you own. Your transactions, balances and budgets live in your own Google spreadsheet; FlowState does not keep a copy of them.
What FlowState handles, and where it lives
| Data | Where it is stored | Why |
|---|---|---|
| Transactions, balances, budgets, investments you enter | Your Google spreadsheet, in your Google account | To show your finances in your sheet |
| Bank connection tokens from Plaid | FlowState's server, encrypted. Your spreadsheet holds only a connection ID for each bank | To refresh your data when you sync, and to disconnect your banks when you ask |
| A one-way hash of your license key, the Plaid ID of each connection, and when it was created and last used | FlowState's server, with the connection | To make sure only your license can use your connections |
| License key | Your Google account's private add-on settings, and Lemon Squeezy | To unlock live bank data |
| Your Google account email | Not stored by FlowState | To send the optional weekly summary to you, from your own account |
| Name, email and payment details | Lemon Squeezy, our payment provider | To bill your subscription |
Bank connections and Plaid
FlowState uses Plaid Inc. to connect to your bank. You sign in to your bank inside Plaid's window; FlowState never sees or stores your bank username or password. By connecting an account, you agree to Plaid's End User Privacy Policy.
The FlowState service
When you use live bank data, requests to Plaid pass through FlowState's server, which adds FlowState's credentials and checks your license. Your transactions and balances pass through it in transit and are not stored. The server keeps only the connection records in the table above. Its logs record the type of request, the time and the result, never bank data or connection tokens. Our hosting provider, Google Cloud, keeps standard request logs (such as IP address and time) for up to 30 days.
Google user data
FlowState asks Google only for what it needs: to read and write the spreadsheet you use it in, to copy the FlowState template into it, to connect to Plaid and the FlowState service, to run scheduled syncs you turn on, and to email your weekly summary to you. The contents of your spreadsheet are not sent to FlowState's server. FlowState's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we never do
We do not sell your data, share it for advertising, or use it to train AI models. No one at FlowState can see your spreadsheet unless you share it with them.
Your choices
- Unlink a bank from the FlowState panel at any time. This ends the connection at Plaid and deletes FlowState's record of it.
- Use Settings, then Your data, then "Disconnect all banks and delete my data" to disconnect every bank linked with your license, in every workbook, and erase those records. Your spreadsheet and its transactions stay yours.
- Uninstall the add-on from Extensions, then Add-ons, then Manage add-ons. Your spreadsheet stays yours to keep or delete.
- To delete your billing records, email us. Lemon Squeezy may keep some records where tax law requires it.
Security
Bank connection tokens are encrypted with Google Cloud Key Management Service, with keys rotated every 90 days, and each token can be decrypted only for its own connection. A connection ID works only with the license that created it. FlowState's Plaid credentials are kept in Google Secret Manager and are never placed in a spreadsheet. All connections use HTTPS.
Children
FlowState is not intended for anyone under 18.
Changes
If this policy changes, we will update the date above and, for significant changes, tell subscribers by email before they take effect.
Contact
FlowStateSheets LLC
8735 Dunwoody Place #13596
Atlanta, GA 30350
support@flowstatesheets.com