Privacy policy

Ledgerbury is billing and bookkeeping software for a business, used in the web browser. You sign in to a business account, and the app shows and edits that business's records.

• We collect what you type into the app, and what your account needs to work.
• Your records are kept on our own servers.
• There is no advertising, no analytics and no tracking of any kind in this app. The few outside services it can use, and what each receives, are listed under “Who else sees it”.
• We do not know where you are. The app never asks for your location.

Your account. Your name, email address, phone number and the business you belong to — given when your business signs up, or when its owner adds you.

Sign-in records. The network (IP) address and the browser or device of each sign-in, to protect your account. You can see and end your sessions from your account.

The records you enter. Customers and suppliers, items and stock, invoices, purchases, payments, expenses and the ledgers built from them. This is the purpose of the app. Some of it is personal information about your customers, which you enter and control; you are responsible for having the right to do so.

Photos and files you upload. Only when you choose to: a picture of an item, your business logo, your profile photo, a photo of an expense receipt, or a file you import such as a backup, a spreadsheet or a supplier's invoice PDF. The app receives only the file you pick; it cannot browse your device.

• Location. The app never requests or uses it.
• Your camera or microphone. The site tells your browser not to allow either. A barcode scanner works as a keyboard and needs neither.
• Your contacts, calendar, messages or photo library.
• Advertising identifiers. There are no ads and no ad SDK.
• Analytics. No usage tracking or behavioural profiling of any kind.
• Card numbers or bank credentials. See “Taking a payment online” below.

If your business has connected a payment gateway, an invoice can offer “Take payment online”. That opens a secure page where the gateway — such as Stripe or Razorpay — collects the payment.

The card, bank or UPI details are entered on the gateway's own checkout, and are handled by the gateway under its own privacy policy. They never pass through Ledgerbury. Ledgerbury is told only that a payment of a given amount succeeded or failed, so it can mark the invoice.

Ledgerbury does not process, hold or lend money. It records that a payment happened.

Only to run the service: to sign you in, to show and store your business records, to produce your invoices, reports and tax returns, to print and share documents you ask it to, and to answer you when you contact support.

We do not sell your data. We do not share it with third parties for their own purposes. We do not use it to advertise to you or profile you.

• Other people in your business, according to the role their owner gave them.
• Our hosting provider, which stores the servers the service runs on.
• Your payment gateway, if you have connected one, for the payments you take through it.
• Google, only where “Sign in with Google” or sign-in codes by text message are switched on: it receives what that sign-in needs — your Google account, or your phone number.
• An AI provider (Google Gemini or DeepSeek), only where the in-app assistant is switched on: it receives the messages you send to the assistant and the name of the page you are on — never your records.
• Our email and text-message providers, for the messages the service sends you or your customers.
• Anyone you send a document to — when you share an invoice or a report over WhatsApp, email or another app, that app and its recipient receive it. That is you sending it.
• Authorities, where the law requires it.

On servers in France, rented from our hosting provider, for as long as your business account is active. Some records — invoices, tax documents — must be kept for statutory periods under the tax law that applies to your business, and are retained accordingly even if you stop using the app.

In your browser, the app keeps your sign-in token, a cache of recently viewed records so it still works when the shop's internet drops, any bills queued while offline, and your printer settings. Signing out clears your credentials. Clearing this site's data in your browser removes the rest.

Traffic between the app and our servers is encrypted with HTTPS. Sign-in sessions are limited to a small number of networks per account, and you can see and end sessions from your account.

No system is perfectly secure, and we do not claim otherwise. Treat your password as you would the key to the till.

• Your records can be exported at any time from Utilities → Export.
• Access, correction and deletion are described on the account-deletion page linked below.

Ledgerbury is business software and is not directed at children. We do not knowingly collect information from anyone under 18.

If this policy changes we will update the date at the top and, for anything that materially affects you, tell you in the app or by email.