Legal

Privacy Policy

Effective September 16, 2026

Ledgeroto is currently in a closed beta. This policy is intentionally brief and will be expanded before general availability. It describes what we collect today and how we use it.

1. Information we collect

Account information — your name, email address, and, if you sign in with Google, the basic profile information Google shares with us.
Business data you provide — the records your organization enters into the Service, such as products, vendors, purchase orders, shipments, invoices, and payments.
Connected-service data — if you connect an integration such as QuickBooks, Xero, or Amazon, we store the authorization tokens and the data those services return that the integration needs.
Billing information — payments are processed by Stripe. We do not store your full card details; we keep only what Stripe shares with us, such as subscription status and the card's last four digits.
Usage and log data — standard technical information such as IP address, browser type, and pages visited, collected to operate and secure the Service.

2. How we use information

to provide, maintain, and improve the Service;
to authenticate you and secure your account;
to process billing and manage subscriptions;
to communicate with you about the Service, including beta updates;
to debug problems and understand how the beta is being used.

Some features use AI models to answer questions about your organization's data (for example, the data assistant). Your data is sent to the AI provider only to generate the response you requested and is not used by us to train models.

3. How we share information

We do not sell your personal information. We share information only with:

Service providers that help us run the Service — such as hosting infrastructure, Stripe for payments, and AI model providers for the features described above — and only as needed to provide their function;
Third-party services you connect, such as QuickBooks, Xero, Google, or Amazon, at your direction;
Your organization — data you enter is visible to other authorized members of your organization according to their roles;
Legal authorities, if required by law.

4. Cookies and analytics

We use cookies that are necessary for the Service to work — session authentication, CSRF protection, and remembering interface preferences. We also use Google Tag Manager to load analytics that help us understand how the Service is used, which may set analytics cookies. We do not use advertising cookies.

5. Data retention

We keep your information while your account is active. If your access ends, we will delete or anonymize your organization's data within a reasonable period, except where we need to retain it for legal or accounting purposes. You may request deletion at any time.

6. Security

Each organization's data is isolated in its own database schema, connections are encrypted in transit, and access within your organization is controlled by roles and permissions. No system is perfectly secure, and this is beta software — please report any security concern to us immediately.

7. Your rights

You may request access to, correction of, or deletion of your personal information, or an export of your organization's data, by contacting us as described below. We will respond within a reasonable time.

8. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy as the product evolves. If we make material changes, we will give notice through the Service or by email. The effective date above reflects the latest revision.

10. Contact

During the closed beta, privacy questions and requests can be raised directly with your Ledgeroto point of contact — the person who invited you to the beta. See also our Terms of Service.