Privacy Policy

Ledg is operated by PPLETC WORKS INC., a British Columbia company (“Ledg,” “we,” “us”), from British Columbia, Canada. This Privacy Policy explains what personal information we collect, why we collect it, with whom we share it, how long we keep it, and the rights you have under the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”), the British Columbia Personal Information Protection Act (“BC PIPA”), and the Quebec Act respecting the protection of personal information in the private sector (the “Quebec Act,” as amended by Law 25).

Privacy Officer (person in charge of the protection of personal information): info@ledg.ca

Account information

Email address, hashed password, display name, and profile data returned by Google when you sign in with Google.

Business information you enter

Business name, business number, optional website, province, fiscal year-end, transactions, categories, receipts you upload, GST/HST/PST configuration, and any other bookkeeping data you choose to record.

Tax details for sole proprietors and partners

If you run a sole proprietorship or are a partner, the details you give for your T2125 and your personal tax estimate, such as your business address, how you use your home and vehicle for the business and what they cost, your other partners' names, addresses and shares, your pay from a job, other income and deductions, and the CRA instalment reminders you received.

Minute book

For a corporation, the minute book documents you add, which can name its directors and shareholders. The files are saved in your Google Drive, and we keep a record of each one, such as its name and section.

Device and usage signals

IP address, user agent, device type, the pages you visit in the Service, actions you take, and approximate timing. Used to operate the Service, prevent abuse, and improve reliability.

How you found us

Your answer to the question at account setup about how you heard of Ledg and, unless you turn it off, the website and link that brought you to Ledg on your first visit. You can turn this off in cookie settings, and in Quebec it stays off until you turn it on.

Communications

Messages you send to support, feedback you submit, and the records of notices we send you (account verification, receipts, security alerts).

Connected AI assistants

If you connect an AI assistant, we record which assistant you connected, when you approved it, what it is allowed to do, and which assistant recorded a given entry. For each request it makes, we also record which business it was for, which of Ledg's tools it used, whether it worked and how long it took, but not the rest of what was sent or what came back, and keep that record for 180 days. See the AI assistants you connect section below.

• To provide the Service, including authenticating you, storing your books, and displaying them back to you.
• To send transactional messages that the Service depends on (email verification, password reset, security alerts, receipts).
• To support you when you contact us.
• To detect, investigate, and prevent abuse, fraud, and security incidents.
• To understand how the Service is used and to improve it.
• To learn how people find Ledg, from the sign-up details under How you found us. Not used for advertising.
• To comply with applicable law and respond to valid legal process.

We do not sell your personal information. We do not use your books to train public machine-learning models. We do not share your personal information with advertising networks.

By creating an account or using the Service, you consent to the collection, use, and disclosure of your personal information described in this policy. Where the law requires express consent for specific activities (for example, marketing communications under the Canadian Anti-Spam Legislation), we will ask for it separately.

You may withdraw consent for optional processing at any time. Some withdrawals (for example, withdrawing consent to store your books) will require us to close your account because the Service cannot function without that data.

We share personal information with service providers who help us run the Service; with people you choose, such as an accountant you invite or someone you send a report to; with an AI assistant you connect, as described in AI assistants you connect below; with an acquirer or successor if Ledg's business is sold, merged or reorganized, as the law allows, in which case we will give you notice so you can exercise your rights before any transfer; and with authorities when the law requires it.

We use service providers to host the Service, store data, sign you in, send email, receive receipts you email to Ledg, take payments and import bank transactions. Stripe processes card payments, and Ledg does not see or store your full card number.

If you link a bank account, we use Plaid to import its transactions. You sign in to your bank inside Plaid, and we never see your bank login. We keep the transactions and account details for the accounts you choose. Plaid handles your data under the Plaid End User Privacy Policy, and by linking an account you agree to that. We do not sell bank data. You can disconnect a bank at any time on the Stage page. Disconnecting ends our access and deletes imported transactions you never added to your books. Entries you already added stay in your books.

If you connect an AI assistant such as Claude or ChatGPT, it can read your books and, with the permissions you approve, add or fill in entries waiting in Stage, or change business settings. It cannot confirm an entry, change a confirmed entry, or move money. What it reads is sent to that assistant's provider so it can answer you, and the provider's own terms, not this policy, govern what it does with it. Ledg receives only what the assistant sends to Ledg to do what you ask: the details of each request, such as a date range, what a receipt or bank statement says, a receipt's file, a note, and, when Ledg asked you a question, your answer in your own words, which is kept with the entry. Ledg does not receive the rest of your conversation. We keep a record of which assistant is connected, what you allowed it to do, and what it did in Ledg. You can revoke a connection at any time in Settings; it can take up to an hour to lose access.

Connecting Google Drive is optional. Without it, you cannot attach receipt files or keep a minute book in Ledg. When you click Connect Google Drive in Settings, then Google Drive, we open Google's OAuth consent screen. You authenticate directly with Google; Ledg never sees your Google password.

We request only the following scopes:

• https://www.googleapis.com/auth/drive.file - the narrowest Drive scope. It lets Ledg create files, then read, update, and delete files that Ledg created. It does not grant access to any other files in your Drive, including files you created outside Ledg, files shared with you, or your folder structure outside what Ledg builds.
• openid email profile - so we can show you which Google account is connected on the Settings page.

Ledg stores the Google access tokens encrypted.

Ledg saves the files you attach into a Ledg folder in your Drive. The file itself stays in your Drive, and Ledg keeps a reference to it, such as its name.

Limited Use Disclosure

Specifically, Ledg uses Google Drive data only to:

• Upload receipts and minute-book documents that you explicitly attach in Ledg.
• Retrieve, update, or delete files that Ledg created at your direction.
• Display filenames and clickable links back to you inside the Ledg interface.
• Show a receipt image, or a link to a receipt or minute-book file, to an AI assistant you connected yourself, when that assistant asks for it over a connection you approved. You can revoke that connection at any time in Settings.
• When that assistant asks for a minute-book document you filed, open the file, read its text (or, when it has none, Google Drive's image of its first page) and hand it to that assistant. Ledg does not keep or analyze what it reads.

Ledg does not:

• Use Google Drive data for advertising or any third-party purpose.
• Transfer Google Drive data to third parties except as necessary for the operations above, or at your direction to an AI assistant you connected, and otherwise only with service providers under written confidentiality agreements.
• Allow humans to read your Drive data, except (i) with your explicit consent, (ii) for security purposes such as investigating abuse, (iii) to comply with applicable law, or (iv) for internal operations and only after the data has been aggregated and anonymized.
• Use Google Drive data to develop, improve, or train generalized AI or ML models.

How to disconnect

You can disconnect Drive in Settings, or remove Ledg's access in your Google account. Files already saved stay in your Drive, including after you close your Ledg account.

Ledg uses cookies and similar browser storage to keep you signed in and remember settings such as your colour theme. These are always on. Blocking them stops sign-in from working.

Two kinds are optional. Analytics records which pages you open and some of the buttons you use, so we can see what to fix. It stays off until you turn it on. The first-visit note, shown as Marketing in cookie settings, records the site that sent you and the first page you opened. It stays in your browser and reaches us only if you create an account. It is on unless you turn it off, and in Quebec it stays off until you turn it on.

Separately, we count page visits and page speed for everyone without cookies. If you sign in with Google, pay by card, or connect a bank, those services may set their own cookies under their own policies. You can change these choices with the button below.

We retain personal information for as long as your account is active. When you close your account, we delete your personal information within thirty (30) days, except where we are required to retain it to comply with legal obligations (for example, financial records, tax records under the Income Tax Act, or breach-log retention under PIPEDA) or to resolve disputes and enforce our agreements.

Deleted data can remain in encrypted backups for up to 90 days before it ages out.

You are responsible for exporting any records you want to keep before closing your account. The Service includes an export feature for that purpose.

We protect personal information with safeguards suited to its sensitivity, including encryption in transit and at rest, and we keep encrypted backups. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the regulator as the law requires. To report a security problem, email info@ledg.ca.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of information that is inaccurate or incomplete.
• Request deletion of your personal information, subject to legal retention obligations.
• Export your personal information. If you live in Quebec, you can ask for a copy in a structured, commonly used technological format.
• Withdraw consent for optional processing.
• Object to processing in certain limited circumstances.
• Make a complaint to us, or to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, or, in Quebec, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

To exercise any of these rights, email info@ledg.ca. We will respond within thirty (30) days. We may ask you to verify your identity before acting on a request.

The Service is not intended for individuals under the age of majority in their province or territory of residence. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it.

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service at least fourteen (14) days before the changes take effect. The updated policy takes effect on the date listed at the top of this page.