Privacy

What we collect and why.

Draft for review. Placeholders in [square brackets] must be completed and the text reviewed by a lawyer before public launch.

[Company legal name] (“we”) runs LedgerAI. This page says plainly what happens to the information you put into it.

What we collect

  • Your account: email address and a password (stored only as a one-way hash).
  • What you put in your books: business details, contacts, invoices, expenses, statements you import, receipts and documents you upload, time and mileage you log.
  • Basic technical logs (for example request times and errors) so we can keep the service running.

Who else processes it

  • Anthropic (Claude API). Receipt photos, PDF statements and the questions you ask the assistant are sent to Anthropic to be read and answered. CSV imports are not sent for AI.
  • Microsoft (email delivery). When you email an invoice, the message and its PDF go through Microsoft 365 from our sending mailbox.
  • Railway (hosting). The app and its database run on Railway's infrastructure in [region].

We do not sell your data, and we do not use it for advertising.

Sharing inside your business

People you invite (an accountant, a bookkeeper) see what their role allows. Invoice links you share show only that invoice, expire after 30 days, and can be turned off at any time.

How long we keep it

We keep your records while your account is open, because a ledger must stay complete. [Describe deletion and export on request, and the backup retention window.]

Your choices

You can export your books at any time (Taxes, then the workbook or accountant package). To ask for deletion or a copy of your data, write to [privacy contact email].