Privacy Policy

• Account details: name, email, and organisation, provided when you're onboarded or invited.
• Uploaded documents and the structured data extracted from them.
• ERP records you import for reconciliation.
• Basic usage and log data (e.g. request timestamps) used for reliability and abuse prevention.
• Aggregate, cookieless page-view statistics for the public website and login page (no personal identifiers, no tracking inside the signed-in app).

Your data is used to operate the Service for you: extracting document data, matching it against your ERP records, and giving your team a place to review the results. We don't sell your data, and we don't use your documents to train models for other customers.

Each organisation's data lives in its own database, separate from every other organisation on the platform. Every request is scoped to the caller's organisation before it touches the database — there is no shared query path across tenants.

Document extraction is performed by a third-party AI service provider: the document content is sent to that provider for the sole purpose of returning structured data back to LedgerSync. It is not used by us or, per that provider's terms for API traffic, by them, for anything beyond fulfilling that request.

Access is authenticated with short-lived tokens (with a separate, longer-lived token used only to renew a session — the two can't be substituted for each other). Passwords are hashed, never stored in plain text, and two-factor authentication (TOTP) is available on every account.

We retain your data for as long as your organisation's account is active. If you close your account, associated data is scheduled for deletion within a reasonable period, except where we're required to retain it by law.

You can request access to, export of, or deletion of your organisation's data by contacting us — see below. Organisation administrators can also manage user access directly from account settings.

We may update this policy as the Service evolves. Material changes will be reflected by updating the "last updated" date above.

Questions about this policy or your data? Reach out via the contact page.