Ledgers Technology, Inc. ("Ledgers," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. Please read this policy carefully to understand our practices regarding your personal data.
1. Information We Collect
We collect information that you provide directly to us, information we collect automatically when you use our services, and information we obtain from third-party sources. The types of information we collect depend on how you interact with our platform.
1.1 Information You Provide
When you create an account, use our services, or communicate with us, you may provide us with:
- Account Information: Your name, email address, company name, job title, phone number, and password when you register for an account.
- Billing Information: Payment card details, billing address, and other information necessary to process payments. Note that payment card information is processed by our third-party payment processor and is not stored on our servers.
- Financial Data: Information you connect from banks, accounting software, payment processors, and other financial data sources through our integrations, including transaction records, account balances, invoices, and related metadata.
- Communications: Information you provide when you contact our support team, respond to surveys, or communicate with us through any channel.
- Profile Information: Any additional information you choose to add to your profile, such as a profile picture or company logo.
1.2 Information Collected Automatically
When you access or use our services, we automatically collect certain information, including:
- Usage Data: Information about how you interact with our platform, including pages visited, features used, actions taken, time spent on pages, and the date and time of your visits.
- Device Information: Information about the device you use to access our services, including device type, operating system, browser type and version, unique device identifiers, and mobile network information.
- Log Data: Server logs that record information such as your IP address, browser type, referring/exit pages, and clickstream data.
- Location Information: General location information inferred from your IP address. We do not collect precise geolocation data.
- Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies. For more details, please see our Cookie Policy.
1.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Integration Partners: When you connect third-party services (such as banks, accounting software, or payment processors) to Ledgers, we receive data from those services as authorized by you.
- Business Partners: We may receive information from business partners with whom we offer co-branded services or engage in joint marketing activities.
- Publicly Available Sources: We may collect information from publicly available sources, such as company websites or professional networking sites, to supplement the information we hold about you.
2. How We Use Your Information
We use the information we collect for various purposes, including:
2.1 Providing and Improving Our Services
- To create and manage your account and provide access to our platform
- To process and display your financial data and generate insights, reports, and visualizations
- To sync data with connected third-party integrations
- To process transactions and send related information, including purchase confirmations and invoices
- To provide customer support and respond to your inquiries
- To analyze usage patterns and improve our platform's functionality, performance, and user experience
- To develop new features, products, and services
2.2 Communications
- To send you transactional communications, such as account confirmations, security alerts, and payment receipts
- To send you product updates, announcements, and information about features or services that may interest you (you can opt out of marketing communications at any time)
- To respond to your comments, questions, and support requests
2.3 Security and Compliance
- To detect, prevent, and address fraud, security breaches, and other harmful activities
- To verify your identity and prevent unauthorized access to your account
- To comply with applicable laws, regulations, legal processes, or governmental requests
- To enforce our Terms of Service and other agreements
2.4 Analytics and Research
- To conduct research and analysis to better understand our users and improve our services
- To measure the effectiveness of our marketing campaigns
- To create aggregated, anonymized, or de-identified data for statistical analysis
3. Legal Bases for Processing
If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we rely on the following legal bases for processing your personal data:
- Contract Performance: Processing necessary to perform our contract with you, including providing you with our services, managing your account, and processing payments.
- Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, conducting analytics, preventing fraud, and marketing our products (where not overridden by your rights).
- Consent: Processing based on your consent, such as when you opt in to receive marketing communications or connect third-party integrations. You may withdraw consent at any time.
- Legal Obligation: Processing necessary to comply with our legal obligations, such as responding to valid legal processes or maintaining records required by law.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your browsing activities and to personalize your experience on our platform. Cookies are small data files stored on your device that help us improve our services and your experience, see which areas and features of our services are popular, and count visits.
We use the following types of cookies: essential cookies required for our platform to function; analytics cookies to understand how our platform is used; functional cookies to remember your preferences; and, where applicable, marketing cookies for advertising purposes. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
5.1 Service Providers
We share information with third-party vendors, service providers, contractors, and agents who perform services on our behalf, such as hosting, data analytics, payment processing, customer support, and email delivery. These service providers are contractually obligated to protect your information and may only use it for the purposes we specify.
5.2 Integration Partners
When you connect third-party services to Ledgers, we share information with those services as necessary to enable the integration. The data shared depends on the specific integration and your permissions.
5.3 Legal Requirements
We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, or legal process; (b) respond to valid governmental requests; (c) protect our rights, privacy, safety, or property, or that of our users or the public; or (d) detect, prevent, or address fraud, security, or technical issues.
5.4 Business Transfers
In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, we may transfer or share your information with the relevant parties. If such a transaction occurs, we will notify you and outline your choices regarding your information.
5.5 With Your Consent
We may share your information with third parties when you have given us your consent to do so.
6. International Data Transfers
Ledgers Technology, Inc. is headquartered in the United States, and we process and store information on servers located in the United States and other countries. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our servers or service providers are located.
When we transfer personal data from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we use appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure that your information is protected in accordance with this Privacy Policy.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.
- Account Data: We retain your account information for as long as your account is active. If you close your account, we will delete or anonymize your information within 90 days, unless retention is required by law.
- Financial Data: Data connected from third-party integrations is retained until you disconnect the integration or close your account, after which it is deleted in accordance with our standard procedures.
- Usage Logs: We retain usage logs for up to 24 months for analytics and security purposes, after which they are anonymized or deleted.
- Billing Records: We retain billing and transaction records for up to 7 years as required by tax and accounting laws.
- Communications: We retain customer support communications for up to 3 years to provide consistent service and resolve disputes.
8. Security Measures
We implement appropriate technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: We use TLS encryption for data in transit and AES-256 encryption for data at rest.
- Access Controls: We implement role-based access controls and the principle of least privilege to limit access to personal data.
- Authentication: We support multi-factor authentication and enforce strong password requirements.
- Security Testing: We conduct regular security audits, vulnerability assessments, and penetration testing.
- Incident Response: We maintain incident response procedures to promptly address any security breaches.
- Employee Training: Our employees receive regular training on data protection and security practices.
While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices.
9. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information under applicable data protection laws. These rights may include:
- Right to Access: You have the right to request a copy of the personal information we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
- Right to Erasure: You have the right to request that we delete your personal information, subject to certain exceptions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.
- Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes or based on legitimate interests.
- Right to Withdraw Consent: Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.
To exercise any of these rights, please contact us at privacy@getledgers.com. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.
9.1 California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale or sharing of your personal information. As stated above, we do not sell your personal information.
10. Children's Privacy
Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@getledgers.com. If we learn that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where required by applicable law, by providing additional notice (such as sending you an email or displaying a prominent notice within our services).
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Ledgers Technology, Inc.
Email: privacy@getledgers.com
Address: New York, USA
For data protection inquiries from the EEA or UK, you may also contact our Data Protection Officer at dpo@getledgers.com.