Privacy Policy

Last updated: September 3, 2026

We value your trust and respect your privacy. Ledgeryt ("Ledgeryt", "we", "us", or "our") exists to give small business owners and self-employed people a fast, simple way to organize their bookkeeping and financial records.

We believe a privacy policy should be understandable without a lawyer by your side, so we have worked to explain — clearly and in plain language — what we do, what information we collect, and why. If anything here is unclear, please contact us using the details at the end of this page.

In plain language: This policy explains what personal information we collect, why we collect it, and the choices and rights you have over it.

1. Scope and Who We Are

Ledgeryt provides an online bookkeeping and accounting platform (the "Service") that lets you manage accounts, transactions, invoices, bills, customers, vendors, and sales taxes. This Privacy Policy applies to the Ledgeryt website and the Service.

This policy does not apply to third-party websites or services that you may access through links, each of which has its own privacy policy. We encourage you to review those policies separately.

2. Our Approach: Canada's Ten Fair Information Principles

As a Canadian platform, our privacy practices are built on the ten fair information principles set out in the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation:

Accountability
Identifying purposes
Consent
Limiting collection
Limiting use, disclosure, and retention
Accuracy
Safeguards
Openness
Individual access
Challenging compliance

In plain language: These ten principles are Canada's ground rules for collecting, using, and protecting personal information, and they guide everything we do.

3. What Is Personal Information?

"Personal information" means information about an identifiable individual. It includes things like your name, email address, and the financial information you enter into your Ledgeryt account. Information that is aggregated or anonymized so that it cannot identify an individual is not personal information.

4. Information We Collect

We collect only the information needed to provide the Service. The categories we may collect include:

Account information — your name, email address, and password (stored in hashed form).
Business information — business or entity name, address, phone number, fax number, email address, tax identifiers, website, and any logo you upload.
Accounting data — the financial records you enter or import, including transactions, accounts, invoices, bills, customers, vendors, and sales-tax definitions.
Login and usage information — your sign-in activity and basic technical information such as IP address, browser type, device type, pages visited, and timestamps, collected through server logs.

In plain language: We collect your account details, your business details, the accounting data you enter, and basic technical/log information. We do not ask for government identification numbers, banking credentials, or health information.

5. Purposes for Collecting, Using, and Storing Information

We collect, use, and store personal information for the following purposes:

To create and manage your account and authenticate you;
To provide, operate, maintain, and improve the Service;
To store, process, and display the accounting data you enter or import;
To send account-related communications, including email verification and security notices;
To provide customer support;
To detect, prevent, and address technical or security issues; and
To comply with legal and regulatory obligations.

We do not use your personal information to serve third-party advertising, and we do not sell your personal information.

In plain language: We use your information to run the Service for you, keep your account secure, support you, and meet our legal duties. We will never sell it.

6. Consent

By creating an account and using the Service, you consent to the collection, use, and disclosure of your personal information as described in this policy. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us. If you withdraw consent for information that is necessary to provide the Service, we may no longer be able to provide it to you.

7. Limiting Collection

We limit the collection of personal information to that which is necessary for the purposes identified in this policy. The information we collect depends on the features you use.

If you invite another user (for example, a collaborator or team member) to access your Ledgeryt account, you are responsible for ensuring you have the authority to share their information with us and that they are aware of this policy.

In plain language: We only collect what we need to give you the features you actually use.

8. Limiting Use, Disclosure, and Retention

We use and disclose personal information only for the purposes described in this policy. We retain your personal information and accounting data for as long as your account remains active, and for a reasonable period afterwards as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Accounting records may also be subject to statutory retention requirements under Canadian tax and corporate legislation.

If you close your account, we will delete or anonymize your personal information within a reasonable period, unless we are legally required to retain it longer.

9. Accuracy

We rely on you to provide accurate and complete information and to keep it up to date. You can update most information directly in your account. You may also contact us to request corrections, and we will respond within a reasonable timeframe.

10. Safeguards

We use administrative, technical, and physical safeguards designed to protect your information against loss, theft, and unauthorized access, use, disclosure, or modification. These include hashed passwords, encrypted transport (HTTPS), access controls, and secured hosting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You also play a role in protecting your information: keep your password confidential, and do not share your account credentials with others. We will never ask you for your password.

11. Openness and Accountability

Ledgeryt has designated a Privacy Officer responsible for our privacy practices. You can contact the Privacy Officer using the details in Section 15.

12. Individual Access

Subject to limited exceptions prescribed by law, you may access, update, and correct the personal information in our custody or control. Most information can be accessed and updated directly in your account. To request access to, correction of, or deletion of other information, contact us using the details below. We may ask you to verify your identity before fulfilling a request.

13. Disclosure of Information

We do not sell your personal information. We may disclose it only in the following circumstances:

Service providers — to providers who perform functions on our behalf (for example, email delivery), under written confidentiality obligations;
Legal and regulatory — where required or permitted by law, or in response to a valid court order or lawful request by a public authority;
Protection of rights — where necessary to protect the rights, property, or safety of Ledgeryt, our users, or others; and
Business transfers — in connection with a merger, acquisition, or sale of all or part of our business, in which case your information remains subject to this policy.

14. Cookies and Similar Technologies

We use only essential cookies and similar technologies (such as browser local storage) that are required for the Service to function, including session management and remembering your preferences. We do not use advertising cookies, third-party tracking cookies, or web beacons. If you disable cookies or local storage in your browser, the Service may not work properly.

In plain language: We only use the minimum technical tools needed to keep you signed in and the app working — no advertising or tracking cookies.

15. Third-Party Services

The Service relies on certain third-party components, including an email delivery service. These providers process information only as necessary to perform their functions. This policy does not govern the practices of third-party websites or services that you may access through links.

16. International Data Transfers

Your information is stored on servers located in Canada. In the event that information is processed by a service provider outside of Canada, we will take reasonable steps to ensure it receives an adequate level of protection in accordance with Canadian law.

17. Children's Privacy

The Service is not directed to individuals under the age of majority in their jurisdiction, and we do not knowingly collect personal information from minors.

18. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. If we make a material change, we will provide notice by email or by a notice on the Service at least 30 days before the change takes effect.

19. Challenging Compliance and Contact

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact our Privacy Officer:

Ledgeryt
Privacy Officer
Email: privacy@ledgeryt.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.