Sign up

Privacy policy

Effective October 15, 2026

This policy explains what personal data LedgerLift Inc, doing business as LedgerIt (“we”, “us”), collects through the LedgerIt website and product, what we do with it, who we share it with, and the choices you have. It sits alongside our terms of service.

1. Two roles

We handle personal data in two different capacities, and the difference decides who you should ask.

  • As a controller, for the data about the people who visit our website and hold LedgerIt accounts: names, email addresses, sign-in records, usage and billing. This policy governs that data.
  • As a processor or service provider, for the data our customers put into their books. A company’s transactions can name its employees, contractors, customers and vendors, and its payroll runs contain what each employee was paid. We process that data only on the customer’s instructions and under our agreement with them. If you are one of those people, the company that uses LedgerIt is the one to ask about it; we will help them answer.

2. What we collect

What you give us

  • Account details: your name, work email address, and an optional profile picture.
  • Sign-in credentials: if you use a passkey, we store only its public key; the private key never leaves your device. One-time sign-in codes are sent by email and expire.
  • Company details: the legal name and details of each set of books you create, and who you invite to it.
  • Books and documents: files you upload, such as bank statements, receipts and CSV exports, and the categories, notes and rules you write.
  • Messages: what you send us through the feedback button or by email.

What comes from services you connect

When you connect a bank, card, payments or payroll provider, we receive what that provider makes available for the accounts you authorize: transactions, balances, counterparties, invoices and payroll runs. We store the access token each provider issues, never your password for that provider.

What we collect automatically

  • Logs: IP address, browser and device type, pages requested, and timestamps, which our servers and hosting providers record to run the service, keep it secure and debug errors.
  • Analytics, only with your consent: which pages and features are used, and on the marketing site, how visitors arrived. See section 5.
  • Session replay, only with your consent: a recording of how the page changed while you used it, so we can see where the product confuses people. Replays hide every digit shown on the page, so the amounts, account numbers and dates we display are not recorded, and they hide what you type into password, number, email and phone fields. Other text, including what you type into a search, name or description field, may be recorded.

3. How we use it

We use personal data to:

  • provide the service: sign you in, keep your books, sync connected services and produce statements;
  • propose categories for transactions (section 4);
  • send the email the service needs: sign-in codes, security alerts, receipts and notices about changes;
  • answer support requests and feedback;
  • keep the service secure: detect abuse, limit request rates and investigate incidents;
  • understand and improve the product, from analytics you have consented to;
  • bill you, and meet our legal, tax and accounting obligations.

We do not sell personal data, and we do not share it for cross-context behavioral advertising. We send marketing email only to people who have opted in or where the law otherwise allows it, and every such email has a one-step unsubscribe.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of our contract with you or your employer (running the service); our legitimate interests in securing and improving it, which we balance against your rights; your consent (analytics, session replay and marketing email, which you can withdraw at any time); and legal obligation (tax and accounting records).

4. Automated categorization

To propose how a transaction should be categorized, we send its description, amount, the account it happened on, the merchant when known, and the company’s chart of accounts to our AI provider, Anthropic. It does not receive balances or other companies’ data. Anthropic processes the request on our behalf and does not use it to train its models. A proposal is accepted automatically only when the model is confident and the amount is small; otherwise a person decides. We do not use personal data to make decisions with legal or similarly significant effects on anyone.

To improve the product, after a conversation with the assistant ends we send a summary of it to the same provider: the words exchanged with the assistant and which of its tools were called and how they answered, with email addresses, tax identifiers, amounts, account numbers and links masked first. The model says, in generic terms, whether the product could not do something you needed. We keep that observation, not your conversation, and our product team reads the consolidated problems, never your books. You can turn this off in Settings under Your data, and a note the assistant offers to send to us is sent only when you choose to send it.

5. Cookies and similar technologies

  • Necessary: your sign-in session, your cookie choice, your language, and the preferences you set yourself, such as theme and which company is open. The site cannot work without these, so they are not switchable.
  • Referral: when you arrive through a partner's link (ledgerit.ai/r/…), the partner's name in that link, kept for up to 90 days so the terms it offers reach the account you create. It holds nothing about you, and it is removed once your account is set up.
  • Analytics: PostHog (product analytics and session replay) and, on the marketing site, Google Analytics. These stay off until you accept them in the cookie banner, and you can change your choice at any time from Cookie preferences in the footer of our public pages.
  • Cookieless measurement: Vercel Web Analytics and Speed Insights count page views and measure load times without cookies or any identifier stored on your device.

If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics and do not ask again.

6. Who we share it with

We share personal data only with the providers that run the service for us, under contracts that limit their use of it to that purpose:

  • Supabase: database, authentication and file storage.
  • Vercel: hosting of the website and product, and cookieless analytics.
  • Render: hosting of our servers and background jobs.
  • Temporal Technologies: scheduling and running background jobs.
  • Anthropic: transaction categorization (section 4).
  • PostHog: product analytics and session replay, with consent.
  • Google: analytics on the marketing site, with consent.
  • Sentry: error monitoring.
  • Resend: delivery of the email we send.
  • Meta Platforms: delivery, through WhatsApp, of the messages, receipt photos and files sent from a number you link, and of our replies.
  • Plaid: the sign-in at a bank you connect through it, which Plaid holds, and that bank's accounts, transactions and balances.
  • Nango: the sign-in at a Gmail or Outlook mailbox you connect, which Nango holds, and the access to that mailbox, to search it for receipts.

Beyond them, we share data with the services you connect, as needed to reach the accounts you authorized; with members of the companies you belong to, according to their role; with professional advisers; with a buyer or successor if our business is sold or merged, under this policy; and with authorities where the law requires it, or to protect the rights and safety of our users or the public.

7. Where it is stored

We store and process data in the United States: our database, authentication and file storage (Supabase) and our servers (Render) run in Virginia, and our analytics (PostHog) in the US. Our website is served from Vercel’s global network, which may deliver pages from a location near you. When data about people in the European Economic Area, the United Kingdom or Switzerland is transferred there, we rely on the EU Standard Contractual Clauses and their UK and Swiss equivalents, or on a provider’s certification under the Data Privacy Framework.

8. How long we keep it

  • Account and books: for as long as the account is open, then for 30 days so you can export, then deleted as described on the data deletion page.
  • Records we must keep: billing and tax records, for as long as tax law requires, which is up to seven years.
  • Logs and error reports: kept by our hosting and error-monitoring providers for at most 90 days.
  • Analytics and session replays: session replays for up to 90 days and analytics events for up to seven years, and deleted when you withdraw consent.
  • Backups: overwritten on a rolling basis within 30 days.

9. Security

Data is encrypted in transit and at rest. Each company’s books are separated from every other’s in the database itself, not only in our code, and staff access is limited to what their role needs. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authorities as the law requires. Report a security or privacy concern to security@ledgerit.ai.

10. Your rights

Depending on where you live, you may have the right to:

  • know what personal data we hold about you and get a copy of it;
  • correct it, or have it deleted;
  • take it with you in a portable format;
  • object to or restrict how we use it, and withdraw consent you gave;
  • opt out of the sale or sharing of personal data (we do neither);
  • not be treated differently for exercising any of these rights.

You can edit your profile yourself in Settings and change your cookie choice at any time. For anything else, write to support@ledgerit.ai. We will confirm who you are before acting, and answer within the time the law allows, usually 30 days in the EU and 45 days in California. An authorized agent may make a request for you with your written permission. If you are in the EEA or UK, you can also complain to your local data protection authority.

11. Children

LedgerIt is a business service for people aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.

12. Changes to this policy

When we change this policy we update the effective date above. If a change is material, we tell account holders by email or in the product before it takes effect, and where a change affects what you consented to, we ask again.

13. Contact

LedgerLift Inc. Privacy questions and requests: support@ledgerit.ai.