Privacy Policy

LedgerAI.pro ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our accounts receivable automation platform.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password (stored in hashed form). If you sign up through Microsoft or Google SSO, we receive your name and email from the identity provider.

Business Data

When you connect Business Central, we sync invoice data, customer records, and payment information from your ERP. This data is stored in our secure database and used solely to power the automation features you've configured.

Payment Information

Credit card and bank account details are processed directly by Stripe. We never store, transmit, or have access to full card numbers. We only store transaction IDs and payment status for reconciliation purposes.

Usage Data

We collect anonymized usage analytics (pages visited, features used, workflow runs) to improve our product. We do not sell this data to third parties.

2. How We Use Your Information

• To provide and maintain the LedgerAI.pro platform
• To sync data between your Business Central instance and our dashboard
• To send invoice emails, payment reminders, and receipts on your behalf
• To process payments through Stripe and reconcile with your ERP
• To send you product updates, security alerts, and support communications
• To improve our platform based on aggregated, anonymized usage patterns

3. Data Sharing

We do not sell your data. We share data only with:

• Stripe — for payment processing
• SendGrid — for email delivery
• Microsoft — for Business Central API access (using your credentials)
• Vercel / Supabase — for hosting and database services

All third-party providers are bound by their own privacy policies and data processing agreements.

4. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove all personal data within 30 days. Anonymized, aggregated data may be retained for analytics purposes.

5. Data Security

We use industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, and secure credential storage via environment variables. We conduct regular security reviews and follow OWASP best practices.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your data from the dashboard or contact us at privacy@ledgerai.pro for assistance.

7. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@ledgerai.pro.