Privacy Policy

01 Summary

• We never sell or rent personal data.
• Your clients' invoice data belongs to you; we process it only to deliver your invoicing.
• Payment card details are handled by Stripe; Ledgerly never stores full card numbers.
• You can export or delete your data at any time.

02 Who is responsible

For account, billing and website data, Ledgerly Ltd. is the data controller. For the personal data of your clients that appears on invoices you create (their name, email, billing address and payment status), you are the controller and Ledgerly acts as your processor under our Data Processing Addendum, available on request by email.

03 What we collect

From account holders

• Name, email address, business name, time zone and password hash.
• Billing details processed by Stripe; we store only the card brand, last four digits and expiry.
• Invoice templates, branding assets, tax rules and settings.

From your clients, as entered on invoices

• Name, billing email, billing address and, if they pay online, payment status and date.
• Line items, amounts and any notes you add to an invoice.

Automatically

• Log data such as IP address, browser type and pages visited, used for security and reliability.
• Privacy-friendly, cookie-less product analytics in aggregate form.

04 How we use it

• To provide the Service: build invoices, send reminders, process payments and generate reports.
• To bill you for your Ledgerly subscription and prevent fraud.
• To answer support requests and send important service notices.
• To improve the product using aggregated, de-identified usage statistics.
• To send product updates, only if you opt in. You can unsubscribe in one click.

Our legal bases are performance of a contract, our legitimate interests in running a secure service, compliance with legal obligations and, for marketing, your consent.

05 Sub-processors

We share data only with providers that help us run Ledgerly, under written agreements:

• Cloud hosting in the European Union for application data and backups.
• Stripe for subscription billing and for payments your clients make on your invoices.
• Transactional email provider for invoice delivery, reminders and account notices.

An up-to-date list of sub-processors is available on request. We disclose data to authorities only when legally required and will notify you unless prohibited.

06 Financial record retention

Invoices and payment records are kept for as long as your account is active, so you always have a full history to export or report from. If you close your account, we delete your account data within 30 days and remove it from backups within a further 60 days, except that we will retain invoice and payment records for longer only where a statutory record -keeping period legally requires it; in that case we retain only what the law requires, for no longer than the law requires.

07 Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is limited to staff who need it, protected by multi-factor authentication and logged. If we become aware of a breach affecting your data, we will notify you without undue delay.

08 Your rights

Depending on where you live, including under the GDPR and the CCPA, you can request access to, correction, deletion or a portable copy of your personal data, and object to or restrict certain processing. Email support@ledgerly.us.ci and we will respond within 30 days. If your details appear on an invoice issued by a Ledgerly customer, please contact that business first; we will help them fulfil your request. You may also complain to your local data protection authority.

09 Cookies

This website uses no advertising or tracking cookies. The app uses strictly necessary cookies to keep you signed in and to remember your theme preference.

10 Changes

If we make material changes to this policy we will email account holders at least 14 days before they take effect and update the date at the top of this page.

11 Contact

For any privacy question or request, write to support@ledgerly.us.ci.