Privacy Policy

1. Information We Collect

We collect information to provide and improve the Service. The categories of information we collect depend on how you use BaseLedgerPro.

Account information. When you register, we collect your name, email address, and a hashed password. If you represent a business, we also collect the business name, address, and any billing information you provide.

Financial records you enter. This includes general ledger entries, chart of accounts, invoices, bills, receipts, bank account names, and any other financial data you input into the Service.

Imported transaction data. If you use our bank connectivity feature (powered by Plaid), we receive transaction data, balances, and account information from your linked financial institutions.

Usage data. We automatically collect information about how you interact with the Service: pages visited, features used, browser type, IP address, device type, and general geographic region (derived from IP). This data helps us improve the Service and diagnose issues.

Communications. If you contact us for support or send us feedback, we retain those communications.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and billing
• Send transactional emails (account confirmation, password resets, billing receipts)
• Send product updates and announcements (you may opt out at any time)
• Respond to your support requests and feedback
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations

We do not use your financial data to train machine learning models, sell it to third parties, or use it for advertising purposes.

3. How We Share Your Information

We do not sell your personal information. We share your information only in the limited circumstances below.

Service providers. We use trusted third-party service providers to operate the Service. These providers have access to your information only as needed to perform services on our behalf and are contractually obligated to protect it.

Accounting firm access. If you are a client whose account was set up by an accounting firm, the firm and its authorized staff members may access your account data as part of their engagement to provide you bookkeeping or accounting services.

Legal requirements. We may disclose your information if required by law, court order, or government authority, or when necessary to protect our rights, the rights of our users, or the safety of the public.

Business transfers. In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4. Data Security

We take the security of your financial data seriously and implement industry-standard safeguards:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Your data is encrypted at rest using AES-256 encryption on our DigitalOcean infrastructure.
• Access controls: Access to production systems and customer data is restricted to authorized personnel on a need-to-know basis and is protected by multi-factor authentication.
• Regular monitoring: We monitor our systems for unauthorized access and security anomalies.

No method of electronic storage or transmission is 100% secure. While we take every reasonable precaution to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

5. Bank Account Connectivity (Plaid)

The bank account sync feature is powered by Plaid Technologies, Inc. When you choose to connect a financial account, you interact directly with Plaid's secure interface to authenticate with your bank or financial institution.

BaseLedgerPro receives read-only access to your transaction history, account balances, and account details from Plaid for the purpose of importing that data into your books. We do not receive or store your bank login credentials.

Your use of the bank connectivity feature is also governed by Plaid's End User Privacy Policy. You can manage or revoke Plaid's access to your financial accounts at any time at my.plaid.com or by disconnecting accounts from within BaseLedgerPro.

6. Data Retention

We retain your account information and financial records for as long as your account is active and for a reasonable period thereafter to allow for reactivation, to comply with legal obligations, or to resolve disputes.

When you cancel your account, your data is retained for 90 days, during which you may reactivate your account or export your data. After 90 days, your data is permanently deleted from our systems, including backups.

Certain information (such as billing records) may be retained for longer periods as required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Portability: Export your financial data at any time directly from the Service in standard formats.
• Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any such email, or by contacting us.

To exercise any of these rights, please contact us at support@baseledgerpro.com. We will respond to your request within 30 days.

8. Cookies

BaseLedgerPro uses strictly necessary cookies only. These cookies are required for the Service to function — for example, to keep you logged in and to maintain your session state.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not share cookie data with advertising networks.

You can configure your browser to block or delete cookies, but doing so may prevent you from logging in or using certain features of the Service.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe we may have collected such information, please contact us at support@baseledgerpro.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a prominent notice within the Service at least 14 days before the changes take effect.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

11. Contact

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

• Email: support@baseledgerpro.com
• Website: baseledgerpro.com