Privacy Policy

1. Who operates Ledger

Ledger is a service offering. It is not a separate legal entity, a bank, a lender, a broker, a money transmitter or a licensed financial adviser. The service is provided by LAC Tech, which can be reached through lactech.net.

Any contract you enter into when you subscribe to Ledger is with LAC Tech as the provider of the Ledger service, subject to the role of our payment provider described below.

2. Information you give us

We collect the information you provide directly when you create and use an account.

• Account details: email address and, optionally, a display name.
• Authentication data: a securely hashed password, or an identifier from a third-party sign-in provider if you use one.
• Subscription details: the plan you selected and its billing status.
• Anything you choose to send us in a support message.

3. Financial information from linked accounts

When you link a bank account, you do so through a bank-data aggregator. Your banking credentials are entered inside the aggregator's own secure module and are never transmitted to, seen by, or stored by the Ledger service.

In exchange, we receive a read-only access token and the following categories of data:

• Account metadata: institution name, account name, account type and the last digits of the account number.
• Balances: current and available balances.
• Transactions: date, amount, merchant or description, pending status and category.

4. What read-only access means

The connection Ledger requests permits reading balance and transaction data only. It cannot initiate transfers, make payments, change your details with your bank, or open or close accounts. The service contains no money-movement functionality of any kind.

You can disconnect a linked institution at any time from within the application, and you may also revoke access from your bank or the aggregator directly.

5. Information collected automatically

Like most web services, we collect limited technical information needed to operate and secure the service, such as IP address, browser and device type, timestamps, and error diagnostics when something fails.

We use cookies and equivalent local storage strictly for essential purposes: keeping you signed in, maintaining session security and remembering interface preferences.

6. How we use your information

• To provide the core service: importing, categorising and displaying your accounts, transactions, trends and recurring charges.
• To detect recurring charges and dormant subscriptions using patterns in your own transaction history.
• To authenticate you and protect accounts against unauthorised access and abuse.
• To process and manage your subscription through our payment provider.
• To respond to support requests and to fix defects.
• To meet legal, accounting and tax obligations.

7. What we never do with your data

We do not sell your personal or financial information. We do not rent, trade or otherwise make it available to data brokers. We do not use your transaction history to build advertising or marketing profiles, and we do not share it with advertisers.

We do not use your individual financial data to train third-party models, and we do not disclose your data to other Ledger users under any circumstances.

8. Service providers we rely on

Operating Ledger requires a small number of processors, each of which receives only what it needs to perform its function:

• A bank-data aggregator, to establish read-only connections and deliver account and transaction data.
• Cloud hosting and managed database infrastructure, to run the application and store your records.
• Stripe, our payment processor, which processes subscription payments and stores payment credentials on our behalf.
• Email delivery, for transactional messages such as sign-in and account notices.

9. Payments and the Merchant of Record

Subscription payments are processed by Stripe. LAC Tech is the seller of record for purchases of the Ledger service and is responsible for billing, invoicing and applicable sales tax or VAT.

Card numbers and other payment credentials are collected and stored by Stripe, not by the Ledger service. We receive only the information required to know that your subscription is active, such as plan, status and renewal date.

10. Data isolation and security

Every account, transaction, budget and connection record is scoped to your user identifier and enforced at the database level through row-level security, not merely hidden in the interface. One user's query cannot return another user's rows.

Data is encrypted in transit using TLS and encrypted at rest by our infrastructure providers. Aggregator access tokens are held in server-side secret storage and are never exposed to the browser.

No system can be guaranteed to be perfectly secure. We work to protect your information using industry-standard practices, but we cannot promise absolute security.

11. How long we keep your data

Account and financial data is retained for as long as your account remains open. When you disconnect an institution, the associated accounts and transactions are removed from your workspace.

When you delete your account, personal and financial records are deleted within thirty days, except for records we are legally required to keep, such as billing and tax records held by us or by Stripe.

12. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict processing of, or delete your personal information, and to object to certain processing.

You can exercise most of these rights directly in the application, and you may contact LAC Tech through lactech.net for anything else. We will not discriminate against you for exercising these rights.

13. International transfers

Our infrastructure providers may process and store data in countries other than your own. Where required, transfers are made using recognised safeguards such as standard contractual clauses.

14. Children

Ledger is not directed to anyone under 18, and we do not knowingly collect information from children. If we learn that we have collected such information, we will delete it.

15. Changes to this policy

We may update this policy as the service changes. Material changes will be communicated by email or through an in-app notice before they take effect, and the date at the top of this page will always reflect the current version.

16. Contact

Ledger is a service provided by LAC Tech. For privacy questions, data requests or complaints, contact LAC Tech via lactech.net.