Privacy Policy

1. Introduction

Double A Labs LLC, doing business as Ledgit ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our bookkeeping and accounting platform. Please read this policy carefully. By using Ledgit, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, business name, and contact details when you create an account.
• Business Information: Company name, address, tax identification numbers, and industry type.
• Financial Data: Invoices, bills, expenses, contacts, and other financial records you enter into the platform.
• Payment Information: When you make payments through our platform, payment details are processed by our payment processor (Stripe) and are not stored on our servers.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies: We use cookies and similar technologies to maintain your session and preferences.

2.3 Information from Third Parties

• Bank Account Data: When you connect your bank accounts through Plaid, we receive transaction history, account balances, and account information. We do not receive or store your bank login credentials.
• Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive basic profile information from that service.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our bookkeeping and accounting services
• Process transactions and send related information
• Automatically categorize transactions using AI
• Generate financial reports, forecasts, and insights
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations and enforce our terms of service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share data with third-party vendors who perform services on our behalf, including Plaid (bank connections), Stripe (payments), Supabase (database hosting), Vercel (application hosting), and Anthropic (AI categorization).
• With Your Consent: When you authorize sharing with your accountant or team members through our platform features.
• Legal Requirements: When required by law, subpoena, or other legal process, or to protect our rights, privacy, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure authentication with password hashing
• Row-level security ensuring users can only access their own data
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations (such as tax record retention requirements), resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time through the Settings page.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Data Portability: Export your data in a machine-readable format (available in Settings).
• Opt-Out: Opt out of marketing communications at any time.
• Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

To exercise these rights, please contact us through our support page or use the relevant features in your account settings.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the sale of your information. We do not sell personal information. To exercise your CCPA rights, contact us through our support page.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

10. Children's Privacy

Ledgit is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: