Privacy Policy
LedgerlyEXP (“LedgerlyEXP,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use the LedgerlyEXP website, application, and related services (collectively, the “Service”). By using the Service, you acknowledge these practices.
1. Information we collect
Account and organization information
We may collect names, business names, email addresses, phone numbers, business addresses, login information, user roles, organization rules, subscription status, and information you choose to provide.
Expense and financial information
Depending on the features used, we may process business expenses, transaction dates and amounts, merchants, categories, receipts, invoices, mileage, business records, uploaded documents, notes, approval decisions, and reimbursement or payment-status information.
Payment information
Stripe processes subscription payments. We receive identifiers and status information such as Stripe customer, checkout-session, subscription, price, payment, and billing status. We do not directly receive or store full card numbers or card security codes.
Technical and usage information
We may collect IP address, browser and device information, logs, timestamps, pages viewed, features used, error data, and security events.
2. How we use information
We use information to provide and secure the Service; create and manage workspaces and accounts; process subscriptions; store and display expense records and receipts; route reports for approval; send service communications; provide support; troubleshoot and improve features; prevent fraud and abuse; enforce agreements; and comply with law.
3. Automated processing
We may use automated tools to extract, categorize, summarize, or organize expense information. These tools may produce errors. Users and organizations should review results before making financial, reimbursement, tax, or accounting decisions.
4. How we share information
We may share information:
- Within your organization, according to assigned roles and workflows;
- With service providers that support hosting, payments, security, email, analytics, storage, and customer support;
- At your direction or with your consent;
- During a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards; and
- As necessary to comply with law, protect rights and safety, investigate abuse, or enforce agreements.
We do not sell personal information for money. We do not use uploaded expense documents for unrelated advertising.
5. Organization-controlled information
When an organization provides your account, that organization may control access to records in its workspace and may view, export, correct, or delete information according to its policies and applicable law. Direct organization-specific requests to the organization administrator first.
6. Legal bases
Where applicable, we process information to perform our contract, pursue legitimate interests in operating and securing the Service, comply with legal obligations, and act with consent. Consent may be withdrawn where law permits without affecting earlier processing.
7. Data transfers
Information may be processed in the United States and other locations where we or providers operate. Where required, we use appropriate safeguards for cross-border transfers.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No transmission or storage method is completely secure. Protect credentials, use secure devices, and promptly report suspected unauthorized access.
9. Retention
We retain information for as long as needed to provide the Service, maintain business and security records, resolve disputes, enforce agreements, and comply with law. Retention may depend on organization settings, subscription status, data type, and legal requirements. We may deidentify information and retain it where permitted.
10. Access, correction, and deletion
Depending on location, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, or object to certain processing. Contact your organization administrator or us. We may verify identity and may retain information where legally permitted or required.
11. Cookies and similar technologies
We may use essential cookies or comparable technologies for authentication, security, preferences, and core functionality. We may use limited analytics to understand performance. Browser controls can restrict cookies, but doing so may prevent parts of the Service from working.
12. Third-party services and links
The Service may link to or depend on third parties, including Stripe. Their privacy notices govern their processing. We are not responsible for third-party sites or services outside our control.
13. Communications and choices
We may send transactional messages about registration, payments, reports, approvals, security, and service changes. These operational messages are necessary to provide the Service. Marketing messages, if any, will include legally required choices.
14. Children’s privacy
The Service is intended for adults and business use. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child provided information.
15. Policy changes
We may update this Policy. We will post a revised “Last updated” date and provide additional notice for material changes where appropriate or required.
16. Contact us
Privacy questions or requests may be sent to: