Effective date: October 30, 2026 — applies to the NavAch (ACH Viewer / Navigator) browser extension, published by FlowShield.
NavAch runs entirely inside your browser. It makes no network requests while opening, parsing, displaying, redacting, editing, or saving an ACH file, and your files never leave your device.
The only network access that the extension makes: one call to activate or renew the Premium license. That call is described in full below, and it never includes any file content.
When you open a .ach or .txt file, it is read and parsed locally, in memory, inside your browser tab. Nothing about the file — its contents, its filename, or any value extracted from it — is uploaded, logged, or sent anywhere. Closing the tab discards it.
The extension uses the browser's local extension storage (chrome.storage.local) to remember your Premium license key and a random install ID (see below), so you don't have to re-enter the key every time you open the extension. It also keeps data you create in the extension, such as the audit log, an uploaded ABA routing directory, and your reviewer display name. This storage:
The only network access that the extension makes: one call to activate or renew the Premium license. It happens only when you click Activate in the license dialog, or Check for Renewal — typically once when you first activate and about once a year when you renew. The Free version never makes this call.
The call goes to our license server at flowshield.ai and sends exactly three things:
It never includes any ACH file content, file names, or anything else from your work in the extension. The server checks the license, records which install IDs are using it (and when they last checked in), and returns your latest license key. Like any web server, it also records the IP address of the request. We use this only to manage your license and prevent license sharing; it is never sold or shared. To have it removed, email us.
On the Premium upgrade screen and the renewal reminder, there are optional "Email us" links. Clicking it opens your device's own default email application with a pre-filled message addressed to us — it does not send anything automatically, and the extension itself never sees, stores, or transmits that message. Whether to send it, and what it contains, is entirely up to you.
NavAch requests a single browser permission: storage, used for the local data described above. It needs no special permission for the license call. It does not request access to your browsing history, other tabs, or any website content.
NavAch is a professional tool for reviewing payment file formats and is not directed at, marketed to, or knowingly used by children.
If this policy changes, the effective date above will be updated. NavAch never collects data silently: the license call above is the only network access, and it runs only when you click Activate or Check for Renewal.
Questions about this policy or NavAch generally: info@flowshield.ai