Privacy Policy

LedgerHQ is a bookkeeping application owned and operated by Tax Planner Pro, LLC("TaxPlannerPro"). This Privacy Policy explains how LedgerHQ and TaxPlannerPro collect, use, share, and protect personal information when you use the LedgerHQ website, application, and related services.

Tax Planner Pro, LLC
3301 Bonita Beach Rd.
Suite 312
Bonita Springs, FL 34134

For privacy questions, contact us at support@taxplannerpro.com.

We collect the following categories of personal data:

• Account and contact data · name, email address, phone number, business address, organization details, and authentication credentials when you create or manage an account.
• Usage and device data · features used, searches, session activity, device and app identifiers, push token, device type, browser, IP address, crash data, and performance diagnostics.
• Bookkeeping and financial data · business names, bookkeeping settings, chart of accounts, transactions, bank and card account details, statements, invoices, bills, reports, and other financial records you add or authorize LedgerHQ to retrieve.
• Purchase and payment data · subscription product, purchase history, entitlement status, and transaction identifiers from Apple or Stripe. Payment card details are handled by Apple or Stripe and are not stored by LedgerHQ.
• Tally conversation data · the messages you send Tally, the documents and images you attach to those requests, and, when you use voice, the audio you speak and its transcript.
• Connected-service data · when you authorize an AI assistant or another integration, the business names, account identifiers, chart of accounts, journal entries, bank activity, financial reports, and workflow status needed to complete your request.
• Communication and user content · private support messages, bookkeeping requests and replies, customer-service correspondence, files, receipt photos, statement PDFs, and other content you choose to submit.
• Cookies & similar technologies · see Section 10 for details.

We process your personal data for the following purposes:

• Service delivery · providing, maintaining, and improving the LedgerHQ platform.
• Communication · responding to support requests, sending service updates, and notifying you of material changes.
• Improvement · understanding how the service is used to improve features and user experience.
• Security · detecting, preventing, and responding to fraud, abuse, and security incidents.
• Legal compliance · meeting our obligations under applicable law, including tax and accounting requirements.

Depending on where you live, privacy law may require us to identify our legal basis for processing personal information. We process data for the following reasons:

• Contract · processing necessary to perform our contract with you, including providing the service and managing your account.
• Legitimate interests · improving our service, ensuring security, and preventing fraud, balanced against your rights and freedoms.
• Consent · where you opt in to optional features such as marketing emails. You may withdraw consent at any time.
• Legal obligation · where we are required to process or retain data by law, including tax, accounting, security, and compliance obligations.

Tally is LedgerHQ's built-in AI bookkeeper. When you send Tally a message or use a Tally-powered feature, LedgerHQ transmits data to third-party AI model providers acting as processors so they can complete the work you asked for. This section identifies what is sent, who receives it, and how you control it.

What is sent. The content of your Tally conversation, including your messages, documents or images you attach, voice audio and its transcript when you use voice, and the bookkeeping context needed for the request — such as business names, chart of accounts, journal entries, bank activity, and financial reports.

Who receives it.

• OpenRouter, Inc.· routes Tally chat requests to the model that answers them. LedgerHQ's routing denies provider data collection and requests zero data retention.
• OpenAI, LLC· converts your speech to text and Tally's replies to speech when you use Tally voice features.
• Anthropic, PBC · performs certain document reading, research, and categorization tasks, and can receive the bank descriptors needed for that task.

Purpose and protection. These providers process your data only to complete your request. They act as processors for that request under contractual terms that provide protection equivalent to this policy, and LedgerHQ does not use your books, and does not permit these providers to use your books, to train AI models.

Your permission. The LedgerHQ mobile app asks for your permission before your first Tally message or voice session sends any data to these providers, and no data is sent to them until you agree. If you decline, you can keep using the rest of the app; Tally features stay off until you choose to turn them on.

The iOS app asks for device access only when you choose a feature that needs it:

• Camera and photos · take or select receipt images for bookkeeping questions.
• Microphone · record speech that you choose to send for Tally transcription. A visible recording state appears while the microphone is active.
• Face ID · protect the app or unlock a saved login. Biometric templates stay with Apple and are not received by LedgerHQ.
• Notifications · deliver bookkeeping requests, support replies, and service updates that you enable.

LedgerHQ does not request location, contacts, or App Tracking Transparency permission. You can change granted permissions in iOS Settings.

We use the following service providers to deliver LedgerHQ. Each receives only the data needed for the applicable service:

• Railway and cloud storage providers · host the application, database, backups, and files.
• Plaid · connects bank and card accounts when an authorized user chooses to connect them and returns account and transaction data.
• Apple and Stripe · process subscriptions, purchases, and card payments and return purchase or payment status to LedgerHQ.
• Apple Push Notification service and Expo · deliver app updates and notifications to registered devices.
• Sentry · processes crash and performance diagnostics so we can find and repair technical problems.
• Resend and Twilio · deliver service emails and text messages requested by or necessary for a LedgerHQ workflow.
• AI model providers· the providers named in "Tally and AI Processing" above (OpenRouter, OpenAI, and Anthropic), which process Tally requests as processors on your behalf.
• User-authorized integrations · when you separately connect LedgerHQ to an outside AI assistant or another service, we share the requested LedgerHQ data with that service so it can complete the work you asked for. The connected service handles that data under its own terms and privacy policy.

LedgerHQ does not connect an outside service to your books until an authorized user approves the connection. You can revoke a connection from LedgerHQ or the connected service.

LedgerHQ does not sell personal data, serve third-party ads, or track people across apps and websites owned by other companies.

Some of our service providers may process data outside your state, province, or country. Where transfers occur, we use safeguards in place, including:

• Contractual safeguards with service providers that process data for us.
• Internal access controls and policies designed to protect customer data.

We retain personal data only as long as necessary:

• Account data · retained while your account is active. An account-deletion request revokes access immediately and is completed within seven days. We then delete or anonymize account data that we are not required to retain.
• Usage data · retained for up to 26 months while an account is active. When the account is deleted, linked usage data is deleted or anonymized unless we must retain a security or legal record. Deidentified service metrics may remain.
• Bookkeeping records · retained while your workspace is active. When an account is deleted, records belonging only to that account are deleted unless retention is required for legal, tax, accounting, fraud-prevention, or security purposes. Records in a shared business workspace may remain available to its other authorized users.
• Backups · removed through the ordinary secure backup rotation after the live data is deleted.

Depending on where you live, you may have rights regarding your personal data:

You can initiate permanent account deletion directly in the iOS app from More → My account or Profile → Delete account. LedgerHQ does not require a phone call, email, or separate support request. To exercise another privacy right, contact us at support@taxplannerpro.com. We will respond as required by applicable law.

If you are unhappy with how we handle your data, please contact us so we can try to resolve your concern. You may also have the right to contact your local privacy or consumer protection authority.

We encourage you to contact us first at support@taxplannerpro.com.

We use the following types of cookies:

• Strictly necessary cookies · essential for the service to function (e.g. session authentication). These do not require consent.
• Functional cookies · remember your preferences such as theme and language settings.
• Analytics cookies · help us understand how the service is used and where the product can be improved.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect service functionality.

LedgerHQ is intended for business users who are at least 16 years old. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us at support@taxplannerpro.com and we will promptly delete it.

We implement appropriate technical and organizational measures to protect your personal data, including:

• TLS encryption for all data in transit.
• Encryption at rest for stored data.
• Access controls ensuring only authorized personnel can access personal data.
• Regular security reviews and monitoring.

No system is 100% secure. If you discover a security vulnerability, please report it to support@taxplannerpro.com.

We may update this privacy policy from time to time. For material changes, we will notify you by email at least 30 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

We encourage you to review this page periodically for the latest information on our data practices.