Last updated: November 5, 2026
Ledger Personal & Business Finance (“Ledger”, “we”, “us”) is operated by Ledger Financial, LLC. This policy covers the Ledger website and app. By using Ledger you agree to it. Our Terms of Service apply as well.
The short version
- We collect what you give us and what you connect, so Ledger can do its job.
- We never sell your data and we don’t use it for advertising.
- Sensitive details are encrypted, and you can download or delete everything from your account.
- We share data only with the services that make Ledger work, listed below.
1. What we collect
Information you give us
- Account details: your name, email address, password (stored only as a one-way hash), and your two-factor settings.
- Financial records you enter or import: accounts, balances, transactions, budgets, credit cards, loans, insurance policies, assets and home inventory, business income, expenses and mileage, invoices and clients, receipts, tax information and uploaded documents.
- Your clients’ details that you add for invoicing (name, email, address). You are responsible for having the right to store them.
- Support messages and anything you attach to them.
Information from services you connect
- If you connect a bank through Plaid, we receive your account names, balances and transactions from that bank. We never see or store your online banking username or password; you enter those with Plaid.
Information collected automatically
- Sign-in activity, such as the date, IP address and device type, so we can show you where you’re signed in and spot unusual access.
- Cookies that keep you signed in and protect against forgery (see Cookies below).
- Basic server logs and error reports.
Payment information
Card details are collected and stored by our payment processor, Stripe. We keep only your plan, billing status, and the card brand and last four digits.
2. How we use it
- To provide Ledger: show your accounts, reports, forecasts, reminders and tax estimates.
- To bill you and manage your subscription.
- To send service emails you can control: bill and renewal reminders, low-balance alerts, your weekly summary, and invoices you ask us to send. Account, security and billing messages can’t be switched off.
- To keep Ledger secure, prevent fraud and abuse, and fix problems.
- To answer support requests.
- To improve Ledger. We look at how features are used in general, not at the contents of your records, unless you ask us to help with a problem.
Where we send you marketing email, you can unsubscribe with the link in the message.
3. Who we share it with
We use a small number of providers to run Ledger. They may process your data only to do that work for us.
- Stripe processes subscription payments.
- Plaid connects your bank accounts, if you choose to use it.
- Anthropic (the Claude AI service) powers our Lumen assistant and features that read documents for you, such as receipt scanning, credit report import, home inventory photos and value estimates. When you use one of these, the text, image or document you submit, and the questions you ask, are sent to Anthropic to produce the answer. We do not use them to build a profile of you.
- OpenAI provides the optional natural-sounding voice for Lumen. Only the text to be spoken is sent.
- Email delivery provider. We send email through a mail service so messages reach you.
- Hosting and infrastructure providers store and serve the data.
- Public market-data sources (for example for stock and crypto prices). Only the ticker or coin you track is looked up; no personal information is sent.
- Google Fonts supplies typefaces to your browser when you load our pages.
When you email an invoice from Ledger, the invoice link goes to the client address you enter. Anyone with that link can view that invoice, so send it only to the right person.
We may also disclose information if the law requires it, to enforce our Terms, or to protect people’s safety and our rights. If Ledger is part of a merger or sale, your data may transfer to the new owner, who must honor this policy.
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
4. How we protect it
- All connections use HTTPS.
- Sensitive fields (such as account numbers, logins stored in your account profile, tax details, client contact details and many notes) are encrypted at rest with AES-256-GCM. Uploaded documents are encrypted on disk.
- Passwords are hashed with Argon2 and are never stored in readable form.
- Two-factor sign-in is required for every customer and every administrator. Sessions can be reviewed and ended from your account.
- Administrator access is limited by role, and administrator actions are recorded in an audit trail.
No system is perfectly secure, and we can’t promise absolute security. If we learn of a breach that affects you, we will tell you as the law requires.
5. Your choices and rights
- Access and download: use Account & security › Download my data to get a copy of your information.
- Correct: edit your records and profile at any time.
- Delete: use Account & security › Delete my account. Your data is removed from our systems, except records we must keep for legal, tax or fraud-prevention reasons (for example, payment records held by Stripe). Copies in backups are overwritten on the normal backup cycle.
- Emails: turn reminders and the weekly summary on or off under Account & security.
- Bank connections: you can disconnect a bank at any time, and ask Plaid to stop sharing data with us.
Depending on where you live (for example California, Virginia, Colorado and other states, or the EU and UK), you may have additional rights to know, access, correct, delete or port your data, and to object to or limit certain uses. To use any right, use the tools above or contact us. We will not discriminate against you for exercising your rights. If we turn down a request, you may appeal by replying to our decision.
6. How long we keep it
We keep your information while your account is open. If you delete your account, we delete it as described above. If you cancel your subscription but don’t delete your account, we may keep your records so you can come back; you can delete your account at any time to remove them.
7. Cookies
Ledger uses only cookies it needs: one to keep you signed in and one to protect your session from forgery. We don’t use advertising or cross-site tracking cookies.
8. Children
Ledger is for adults. It is not directed to anyone under 18 and we don’t knowingly collect their information. If you believe a child has given us data, contact us and we will delete it.
9. Where your data is processed
Ledger is operated from the United States, and your data is processed and stored there and by our providers, who may operate elsewhere. By using Ledger you understand your information will be handled in the United States.
10. Changes to this policy
We may update this policy. If the change is significant we will tell you by email or in the app before it takes effect. The date at the top shows when it was last changed.
11. Contact us
Questions or requests about your privacy? Write to us through the Support page after you sign in, or at support@ledgerpersonalfinance.com.
Ledger Financial, LLC, registered in Colorado and operating from East Tennessee, United States.