Data Retention

Where your data lives

Your accounting data is stored in book files alongside a metadata database that holds account, membership, tax, and Plaid connection records. No accounting data is transmitted to any third party for storage.

What is retained, and for how long

Ledger & accounting data — retained indefinitely in your book files until you delete the data or your account.
Account metadata (email, name, memberships) — retained while your account is active.
Audit log — records sign-in/sign-out and administrative actions. No IP addresses are logged.
Plaid connection tokens — stored locally; removed when you disconnect a bank or delete your account.
Session state — server-side sessions expire automatically and are cleared on sign-out.
Guest Cam2Ledger scans — if you scan or upload a document on the public Cam2Ledger page without signing in, the scan and the text recognised from it are kept in a private workspace tied to your browser session for 24 hours, so you can sign up and keep it. After 24 hours they are deleted automatically. Signing up (or signing in) moves the scan into your account, where the normal retention rules above apply. You can also discard a scan immediately from the page.

Deletion

You may delete your account at any time from your profile. Deletion purges your user record, session, audit trail, memberships, Plaid connections, and the book files for businesses you own.

Portability

You may export a complete copy of your data (account metadata, book files, and transactions) at any time from your profile.

Last updated: September 6, 2026.