Privacy Policy
Last updated: March 2025
1. Overview
Ledgerly ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it. By using Ledgerly, you agree to the practices described here.
2. Information We Collect
Account data: Name, email address, and password (hashed) when you register.
Financial data you enter: Supplier details, bills, invoices, payment records, and GST/TDS information. This data belongs to you.
Uploaded documents: Bill images and PDFs you upload for AI scanning, stored securely in encrypted cloud storage.
Usage data: Log data including IP address, browser type, pages visited, and timestamps — used for security and improving the Service.
Payment data: When you make a purchase, payment is processed by Razorpay. Ledgerly does not receive or store your card or banking details. Razorpay collects your name, email address, contact number, and payment method details to process the transaction. Please refer to Razorpay's Privacy Policy for full details.
Communications: Emails you send us or support requests.
Financial data you enter: Supplier details, bills, invoices, payment records, and GST/TDS information. This data belongs to you.
Uploaded documents: Bill images and PDFs you upload for AI scanning, stored securely in encrypted cloud storage.
Usage data: Log data including IP address, browser type, pages visited, and timestamps — used for security and improving the Service.
Payment data: When you make a purchase, payment is processed by Razorpay. Ledgerly does not receive or store your card or banking details. Razorpay collects your name, email address, contact number, and payment method details to process the transaction. Please refer to Razorpay's Privacy Policy for full details.
Communications: Emails you send us or support requests.
3. How We Use Your Information
- To provide and operate the Service
- To process bill images using AI (Anthropic Claude)
- To send transactional emails (verification, payment confirmations)
- To respond to support requests
- To detect and prevent fraud or abuse
- To improve the Service based on aggregated, anonymised usage patterns
- To notify you of important updates or changes to the Service
We do not sell, rent, or trade your personal data to third parties.
4. AI Processing
When you scan a bill, the document image is sent to Anthropic's Claude API for data extraction. Images are processed and not stored by Anthropic beyond the API request. The extracted data (supplier name, amounts, GST numbers, etc.) is stored in your Ledgerly account. You should not upload documents containing highly sensitive personal information unrelated to supplier invoices.
5. Data Storage and Security
Your data is stored on secure cloud infrastructure (Supabase/PostgreSQL with row-level security). Documents are stored in Supabase Storage with signed URLs for access. We use industry-standard encryption in transit (TLS) and at rest.
While we take reasonable steps to protect your data, no system is completely secure. We cannot guarantee absolute security.
While we take reasonable steps to protect your data, no system is completely secure. We cannot guarantee absolute security.
6. Third-Party Services
We use the following third-party services to operate Ledgerly:
- Razorpay — payment processing. Razorpay is PCI-DSS compliant and bound by its own Privacy Policy.
- Anthropic Claude — AI bill scanning and natural language queries
- Supabase — database and file storage (encrypted at rest)
- Vercel — hosting
We only share the minimum data necessary for each service to function. We do not sell your data to any third party.
7. Cookies
Ledgerly uses cookies and session storage to maintain your login session and preferences. We do not use tracking or advertising cookies. You can disable cookies in your browser, but this may affect functionality.
8. Data Retention
We retain your data for as long as your account is active. If you delete your account, your data is retained for 30 days (for recovery purposes) and then permanently deleted. You may request immediate deletion by contacting us.
9. Your Rights
Depending on your location, you may have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability (export your data)
10. Children's Privacy
Ledgerly is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notice. Continued use of the Service after changes constitutes acceptance.
12. Contact
For privacy-related questions or requests, contact us at support@yourledgerly.com.