Last updated: September 17, 2026
PensionFlow is a desktop application, installed and run on each licensed pension/insurance agent's own computer. There is no central server that stores or has access to client financial data, Google account data, or email content — every install is fully isolated to the agent who runs it.
With your explicit permission (granted through Google's own sign-in screen), PensionFlow can create events on your Google Calendar and send email from your Gmail address, solely to support its client-meeting- scheduling feature. It does not read your inbox, does not read or modify any calendar event it did not itself create, and does not access any other Google data or service.
Your Google account token, along with any other credentials the app uses (e.g. your Roeto CRM credentials, your software license), is encrypted and stored only on your own computer, using Windows' own local encryption (DPAPI). It is never transmitted to the vendor or any third party.
PensionFlow's shared vendor server is used only for: (1) distributing publicly-published fund statistics (identical for every customer, contains no client data of any kind), (2) checking for and delivering app updates, (3) an optional support request you choose to submit, which is scrubbed of client-identifying information before it leaves your computer, and (4) extracting structured details from meeting transcripts you choose to submit — the transcript content is sent to the vendor server, which uses Anthropic's Claude API solely to extract the meeting's structured details (date, discussion points, action items, etc.), and for no other purpose. This processing is subject to Anthropic's standard commercial API data policy (data retained for up to 30 days for abuse-monitoring purposes and not used to train models) — it is not covered by a zero-data-retention agreement. No Google account data or Roeto CRM data is ever sent to this server.
Questions about this privacy policy can be sent to spfdupport@gmail.com.