Privacy policy

01What we collect

LedgIQ is a bookkeeping service, so most of what we hold is what you put into your books: the transactions you capture, the documents you upload such as receipts and invoices, the names and details of the parties you trade with and the reports the service produces from them.

To run your account we also collect your name, your phone number for sign-in codes, your email address if you give one and your organisation’s name and country. The service keeps technical records such as sign-in events and an audit log of actions taken in your organisation, because tamper-evident history is part of the product.

We do not collect data we do not need. There is no advertising tracking in the product.

02Who processes it

We use a small number of processors to run the service. They are named here by category and the current named list is available on request.

• A cloud database provider stores your books and account records, encrypted at rest.
• An object storage provider stores your uploaded documents, such as receipt images and invoice files.
• Model providers receive text and document images for drafting entries and for answering questions you type. Phone numbers, email addresses, tax identifiers, long account numbers and the party names your books already hold are replaced with placeholders before text is sent. A document image cannot be masked, so it is read by Cloudflare Workers AI inside the account that already stores it, which retains nothing and trains on nothing. Text you type into the chat goes to OpenAI, which retains request content for abuse monitoring under its standard terms and does not use it for training.
• SMS and email delivery providers carry sign-in codes, the messages you ask us to send (such as invoices) and the email that tells our own team a demo request has arrived.

Processors act on our instructions under contract. We do not sell your data and we do not share it with advertisers.

03How long we keep it

Your books are kept for as long as your organisation has an account, because books are records by nature. Bookkeeping records may also carry legal retention periods in your country; where they do, those periods apply.

When your organisation is deleted, your data is removed after an export window that gives you time to take a full copy. Technical logs are kept only as long as security and reliability need them.

04Export and deletion

You can export your full books, your document records and your audit history in one API request, any day. There is no export fee. The uploaded files themselves are not yet part of that bundle, which is stated on the trust page as well as here.

You can ask us to delete your organisation’s account. Deletion follows the export window described above. You can also ask what we hold about you and ask for corrections to your account details.

05If you asked for a demo

The demo form on this site keeps the six answers you give: your business name, your name, a phone number or email address to reply on, your country, the size of the business and what you keep the books in today. It also keeps a scrambled code made from your connection address, which lets us refuse a flood of requests from one place and cannot be read back into the address without a secret only we hold. No account is created.

Your request is stored in our database and emailed to our team’s own inbox, where a person reads it and replies. It is never sent to a model provider and nothing is sent to you until that person writes back. The database, the email provider and the inbox are run by providers who may hold it outside your country, whether that is Bangladesh or Australia.

The scrambled address code is cleared after one day. Your name, your contact details and your business name are removed twelve months after you send the request and we delete the email your request arrived in. What stays is only that a business of that size, in that country and keeping its books in that tool, asked. You can have them removed sooner by writing to hello@ledgiq.app.

06Contact

Privacy questions and requests go to the founder directly while we are small. Write to the contact address published on this site and you will get an answer from a person, not from a queue.