Privacy Notice

Last updated: 16 September 2026

1. Who we are

Buds to Blossoms, Inc., a Florida corporation located in the United States, operates this service under the EZMunny name. For the personal data described in this notice, Buds to Blossoms, Inc. is the data controller and decides how and why your data is processed.

2. What we collect and why

Account data (email address, password credentials): to create and secure your account and sign you in. Legal basis: performance of our contract with you.
Business records you enter (invoices, customer names, products, expenses, payroll entries, uploaded logo): to provide the bookkeeping service. Legal basis: performance of our contract with you.
Subscription status (plan, renewal and payment-status events received from Paddle): to give or restrict access to paid features. Legal basis: performance of our contract and our legitimate interest in operating the service.
Support and suggestion messages: to answer you and improve the product. Legal basis: legitimate interests.
Technical data (IP address, device and browser information, error and usage logs): for security, fraud prevention, troubleshooting and product improvement. Legal basis: legitimate interests.

Card and billing details are collected and processed by Paddle, not by us. We never see or store your full payment card information.

Bank connections. If you choose to connect a bank account, we use Plaid Inc. to link it. You sign in to your bank through Plaid; we never see or store your bank username or password. With your permission, we receive account details (bank name, account name and last four digits) and transaction history (dates, payees, amounts and categories) so we can add those transactions to your books. The connection key Plaid gives us is encrypted and kept only on our servers. We use this data only to provide EZMunny to you, and we never sell it or use it for advertising. You can disconnect a bank at any time on the Bank Accounts page, which ends our access and deletes the stored connection. Plaid's handling of your data is described in the Plaid End User Privacy Policy.

3. Who we share data with

Hosting, database and infrastructure providers that run the service for us.
Paddle.com Market Ltd, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
Plaid Inc., only if you choose to connect a bank account, to link your bank and deliver your account and transaction data to us.
Meta Platforms, Inc. (Facebook and Instagram): when you allow advertising cookies, the Meta Pixel on this site sends Meta your IP address, browser and device information, and pages visited, so we can measure whether our ads lead to visits and sign-ups and show our ads to people more likely to be interested. Where privacy law requires consent, this only happens after you accept. See section 8 for how to change your choice.
Professional advisers such as accountants and lawyers, where necessary.
Authorities where we are required to disclose by law.

We do not sell your personal data.

4. International transfers

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. How long we keep data

We keep your account and business records for as long as your account exists. If your subscription lapses we retain your records so they are available if you return. When you delete your account from Settings, your records are deleted. Some records may be retained longer where required for legal, tax or accounting purposes, after which they are deleted or anonymised.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. You also have the right to complain to your data protection supervisory authority. We aim to respond to requests within one month. You can exercise several of these rights directly in the app by editing your records or deleting your account in Settings.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials and per-user access controls in the database, so that each account can only read its own records.

8. Cookies and local storage

We use essential cookies and browser storage to keep you signed in and to operate the service. Paddle may set cookies necessary to complete checkout.

With your permission, we also use the Meta Pixel (an advertising cookie from Meta Platforms) to measure how our ads perform — see section 3. Visitors in regions whose privacy laws require consent are asked first; everywhere else, advertising measurement is on and you can turn it off here. Your choice applies immediately and you can change it at any time:

You can also clear or block cookies in your browser, but signing in will not work without the essential ones.

9. Contact

For privacy questions or requests, contact us by email at ezmunnysoftware@gmail.com, or through the Suggestions page in your account.