Legal
Privacy Policy
Your financial data belongs to you. This policy explains how we collect, use, and protect your information when you use LedgerLens.
Last updated: August 14, 2026
No resale
We do not sell your financial data or use it to fund ad targeting.
Statement-first
LedgerLens works from documents you upload, not bank login credentials.
Your controls
You can delete your documents, your parsed data, and your whole account from inside the product at any time.
Privacy at a Glance
Before diving into the full policy, here are the commitments that matter most:
- We never sell your financial data. Period.
- We never access your bank login credentials. You upload documents directly.
- All data is encrypted at rest and in transit using industry-standard protocols.
- Each account is fully isolated from other users through tenant-level separation.
- You can delete your data at any time from your account settings.
- We use Stripe to process payments. We never store your full card number.
- When our own parsers cannot read a statement, we send the statement text to OpenAI to extract the transactions. Neither we nor OpenAI use your financial data to train AI models.
Information We Collect
We collect different types of information depending on how you interact with LedgerLens. Here is a breakdown by category:
Account Information
- Name, email address, and password (hashed, never stored in plain text)
- Industry or profession (optional, provided during registration)
- Account preferences and settings
Financial Data
- Transaction details extracted from uploaded bank statements (dates, amounts, descriptions, categories)
- Budget configurations and spending goals you create
- Net worth entries and asset/liability tracking data
- Bill schedules and alert preferences
Uploaded Documents
- Bank statement PDFs and receipts you upload for processing
- Extracted text and structured data from those documents
- Document metadata (file name, upload date, page count)
Payment Information
- Billing plan selection (Starter, Plus, Pro, or Business) and billing interval
- Payment method type (credit or debit card)
- Stripe customer and subscription identifiers
- We do not store full credit card numbers, CVVs, or bank account numbers
Usage and Device Data
- Pages visited, features used, and interaction patterns within LedgerLens
- Browser type, operating system, and device information
- IP address and approximate geographic location
- Referral source (how you found LedgerLens)
How We Collect Information
Directly from you: When you create an account, fill out your profile, upload bank statements, configure budgets, or contact support.
Through document processing: When you upload a bank statement PDF, our system uses automated text extraction (OCR) and parsing to identify transactions, dates, amounts, and descriptions. Most statements are handled entirely on our own servers. When our parsers cannot read a statement confidently, we send the statement text to OpenAI to extract the transactions, and the result is stored in your account. See the Automated Processing section for exactly what is sent and when.
Automatically: When you use LedgerLens, we collect standard usage data through server logs and essential cookies. Beginning August 28, 2026, on our public marketing pages we will also use the Meta (Facebook) advertising pixel to measure the ads we run. It will never run while you are signed in, and never on the pages where you upload or enter financial information. See Cookies and Tracking for what it collects and how to turn it off.
From our payment processor: When you subscribe to a paid plan, Stripe sends us confirmation of your subscription status, payment method type, and billing identifiers. Stripe does not send us your full card number.
How We Use Your Information
We use your information for the following purposes:
Provide and operate LedgerLens
Process your documents, display your financial data, generate reports, and deliver the features you use.
Authenticate and secure your account
Verify your identity, manage sessions with JWT tokens, enforce role-based access controls, and detect unauthorized access attempts.
Process payments
Manage your subscription, process upgrades and downgrades, and handle billing through Stripe.
Send service communications
Deliver bill reminders, alert notifications, account security notices, and subscription updates you have opted into.
Improve our service
Analyze aggregate, anonymized usage patterns to identify bugs, improve performance, and prioritize new features. We do not use your financial data for this purpose.
Comply with legal obligations
Respond to lawful requests from government authorities, enforce our Terms of Service, and protect against fraud or security threats.
We do not use your financial data for advertising, profiling, credit scoring, or any purpose other than providing you with the LedgerLens service.
Third-Party Services
We use the following third-party services to operate LedgerLens. Each has access only to the data necessary to perform its function.
| Provider | Purpose | Data Accessed |
|---|---|---|
| Stripe | Payment processing | Email, plan selection, payment method |
| OpenAI | Reading statements our own parsers cannot read, and suggesting categories for transactions we could not classify | Statement text and transaction records (date, description, amount, merchant) — no account credentials, card numbers, or files |
| Supabase | Database and document storage (United States) | All account and financial data, and your uploaded documents (encrypted at rest) |
| Railway | Application, background processing, and cache hosting | Data in transit through the application; short-lived cached data |
| Vercel | Website hosting and delivery | Request metadata such as IP address and browser type |
| Microsoft Azure Key Vault | Hardware-backed key custody for Budget Wizard encryption | Encryption keys only — never your financial data |
| SendGrid | Transactional and notification email | Email address, name, message content and delivery status |
| ImprovMX | Forwarding email you send to our published addresses | Anything you include in a message to us |
| Google Analytics | Aggregate usage and conversion analytics | Page views, events, device/browser metadata, approximate location |
| Meta Platforms, Inc. | Measuring ads we run on Facebook and Instagram — from August 28, 2026, public marketing pages only, and only if you have not opted out | Page address, referring page, IP address, browser and device type, and whether you started signing up or started a checkout. Never your statements, your transactions, or your account contents. |
We use Google Analytics for first-party product and marketing measurement, and beginning August 28, 2026 we will also use the Meta advertising pixel on our public marketing pages to measure the performance of ads we run. We use no other advertising network, and we never send your statements, your transactions, or any financial data to an advertising provider.
Data Security
Protecting your financial data is foundational to how we build and operate LedgerLens. Here are the measures we have in place:
- Encryption
- All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Uploaded documents are stored in encrypted object storage.
- Tenant Isolation
- Each user's data is logically isolated through row-level tenant scoping. One user can never access another user's data.
- Authentication
- JWT-based authentication with refresh token rotation. Sessions expire automatically and tokens are invalidated on logout.
- Access Control
- Role-based access control (RBAC) restricts data access by user role. Administrative actions are logged in an audit trail.
- No Credential Storage
- Unlike services that connect to your bank, LedgerLens processes documents you upload. We never ask for or store your bank login credentials.
- Incident Response
- We maintain an incident response plan and will notify affected users within 72 hours of discovering a confirmed data breach.
Data Retention
We retain your data for as long as your account is active or as needed to provide you with our services. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Financial data (transactions, budgets) | Until account deletion |
| Uploaded documents | Until you delete them or delete your account |
| Payment and billing records | 7 years after last transaction (legal requirement) |
| Server and access logs | Short-lived — retained by our hosting providers under their standard log-retention windows |
| Cached data (Redis) | Time-limited, typically minutes to hours |
When you delete your account, your data is removed immediately and in every case within 30 days. Copies may persist for a short period in our hosting providers' encrypted backups before those backups age out. Data required for legal compliance (such as billing records) is retained for the legally mandated period.
Your Rights and Choices
Regardless of where you live, we provide all LedgerLens users with the following rights:
Access your data
View all personal and financial data we hold about you, directly in your account dashboard.
Export your data
Download your parsed statement data as an Excel workbook. Excel export is a Plus-plan feature; if you are on the Starter plan and want a copy of your data, email us at privacy@ledgerlens.com and we will send it to you free of charge.
Delete your data
Delete individual documents, transactions, or your entire account from your account settings. If you were invited to someone else's account as a delegate, ask the account owner to remove your access, or email us and we will do it.
Correct your data
Edit or update any information in your account, including transaction categories and personal details.
Manage notifications
Control which alerts and communications you receive from your notification preferences.
Withdraw consent
Where we rely on your consent for processing, you can withdraw it at any time.
For California Residents (CCPA/CPRA)
Under the California Consumer Privacy Act, you have the right to know what personal information we collect, request its deletion, and opt out of its sale or sharing. As stated above, we do not sell your personal information for money. Beginning August 28, 2026 we will share limited website activity with Meta so we can measure our advertising, and California counts that as “sharing” for cross-context behavioral advertising.
Your financial data is classified as “sensitive personal information” under CPRA. We use it solely to provide the LedgerLens service. You may exercise your rights by contacting us at privacy@ledgerlens.com. We will respond within 45 days.
Until August 28, 2026 we do not share your personal information for cross-context behavioral advertising. From that date we will share limited website activity with Meta to measure our advertising, and you will be able to opt out at any time from the “Your Privacy Choices” link in our footer, or by turning on Global Privacy Control in your browser — we will honor that signal automatically and you will not need to tell us anything else. Opting out will not change your plan, your price, or any feature you can use. We never sell or share your statements, your transactions, or any financial data for advertising, and we do not sell any personal information for money.
For European Users (GDPR)
If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.
Our lawful basis for processing your financial data is the performance of our contract with you (providing the LedgerLens service). For usage analytics, our lawful basis is legitimate interest. You may contact us at privacy@ledgerlens.com for any GDPR-related requests. We will respond within 30 days.
Automated Processing and AI Disclosure
LedgerLens uses automated processing to extract data from the bank statement PDFs you upload. Here is how it works:
What happens: When you upload a bank statement, our system uses optical character recognition (OCR) and text parsing algorithms to identify and extract transaction data including dates, amounts, descriptions, and running balances.
What we extract: Transaction dates, amounts, merchant/payee descriptions, and partially masked account identifiers visible on the statement.
What we do not do: We do not use your financial data to train machine learning models. We do not make automated decisions that produce legal or similarly significant effects on you. We do not sell insights derived from your data.
Your control: You can review all extracted data in your dashboard, correct any inaccuracies, and delete individual documents along with all their parsed data at any time.
When we use OpenAI. Two steps can involve an outside AI provider. First, if our own parsers cannot read your statement confidently, we send the statement text to OpenAI's gpt-4o-mini model to extract the transactions. Second, if we cannot confidently categorize a transaction, we send that transaction's date, description, amount, and merchant name to the same model for a category suggestion, which is stored as a suggestion for you to accept or reject — it is never applied automatically. Both steps are limited to Plus, Pro, and Business plans.
What is never sent.We do not send your uploaded file itself, your login credentials, or your card numbers. The statement text we send can include the account number your bank prints on it. Neither we nor OpenAI use your financial data to train AI models; OpenAI processes it only to return the result to us. Everything else — every statement our own parsers can read, and every transaction we can categorize ourselves — is processed entirely on our own systems.
ChatGPT App Integration
LedgerLens is available as a read-only connector inside ChatGPT through OpenAI's Apps SDK. This section explains exactly what data moves where.
What LedgerLens sends to OpenAI. When you ask ChatGPT a question that triggers a LedgerLens tool, OpenAI sends us the tool call (the function name and arguments) over an authenticated HTTPS connection. We process the call on our servers and return a structured response — for example, a list of transactions, a spending-by-category summary, or uploaded-document metadata. Only the structured response text is relayed back to OpenAI so ChatGPT can reply to you. We do not send raw PDFs, bank account numbers, card numbers, CVVs, or authentication secrets through this channel.
What we do not receive from OpenAI. We do not receive your broader ChatGPT conversation history, messages outside the tool call, or any content from other apps you have connected to ChatGPT. We see only the specific tool request your assistant makes.
How access is granted. Connecting LedgerLens to ChatGPT uses OAuth 2.1. You sign in to your LedgerLens account, explicitly approve the scopes transactions:read, documents:read, and offline_access, and a scoped access token is issued. The token permits read-only access — it cannot upload, edit, delete, or export anything.
What we log. Each tool call creates an audit record containing: your user and tenant identifiers, the tool name, a result status code, latency, IP address, and user-agent string. We do not store the raw prompt text, the tool arguments, or the tool result body in this audit log.
Retention and deletion. Audit records are retained under the retention periods described in the Data Retention section above. You can revoke ChatGPT access at any time from ledgerlens.com/settings/integrations or by removing the LedgerLens connector inside ChatGPT. Revocation invalidates the token immediately.
OpenAI as a sub-processor. OpenAI processes your ChatGPT conversation under its own privacy policy: https://openai.com/policies/privacy-policy. LedgerLens is not responsible for data you type into ChatGPT outside of LedgerLens tool calls.
Not professional advice. LedgerLens's responses through ChatGPT are structured data, not professional advice. LedgerLens is not a law firm, CPA, or financial adviser. See our Terms of Service for the full disclaimer.
Payment Processing
All payment processing is handled by our third-party payment partners. LedgerLens does not directly collect, store, or process your credit card numbers or bank account details for payments.
Stripe: Handles credit and debit card payments. Stripe is PCI-DSS Level 1 certified. Stripe Privacy Policy
Starter vs. paid plans: Data collection practices are the same regardless of your plan. The Starter plan is not subsidized by additional data collection or sharing.
Our Free Demo Tools
Some LedgerLens tools let you upload a file without creating an account, so you can see what the product does before you sign up. We treat those uploads differently from the documents in your account:
- We do not save the file to a LedgerLens account or to our database. It is held in memory only for as long as it takes to produce your result.
- Only our own parsing service sees the file. We do not send demo uploads to OpenAI or to any other outside AI provider, and we never use them to train AI models.
- We do not link the upload to a LedgerLens account and we do not build a profile from it.
- We record the IP address of the request so we can stop abuse of the free tools.
- The result files we generate stay available through the link we return to you until that link stops working. If you want your data kept, reviewed over time, or exported, create an account and upload it there instead.
Children's Privacy
LedgerLens is not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16. If we become aware that we have inadvertently collected data from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@ledgerlens.com.
Changes to This Policy
Notice of a change taking effect August 28, 2026. From that date we will use the Meta (Facebook) advertising pixel on our public marketing pages to measure the ads we run, as described in Cookies and Tracking. It will not run while you are signed in, and it will never receive your statements, your transactions, or any financial data. Nothing changes before that date — we use no advertising pixel today. When the change takes effect you will be able to opt out at any time from a “Your Privacy Choices” link in our footer, or by turning on Global Privacy Control in your browser.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes:
- We will update the “Last updated” date at the top of this page.
- For material changes, we will notify you by email and through an in-app notification.
- We will provide at least 30 days' notice before material changes take effect.
- Continued use of LedgerLens after the effective date constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, want to exercise your rights, or have a concern about how we handle your data, reach out to us:
Email: privacy@ledgerlens.com
Response time: We aim to respond to all privacy-related inquiries within 30 days.
If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.