Privacy Policy

1. About this policy

Ledgable Pty Ltd (“Ledgable”, “we”, “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Australian Privacy Principles

Ledgable complies with the 13 Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). These principles govern how we collect, hold, use, and disclose personal information.

3. Information we collect

We may collect the following types of information:

• Account information: name, email address, business name, ABN
• Financial data: bank transaction data imported via bank feed connections
• Usage data: how you interact with the Ledgable platform
• Communication data: emails, support tickets, and feedback you send us
• Payment information: billing details (processed via our payment provider - not stored on our servers)

4. How we use your information

We use your information to:

• Provide and improve the Ledgable service
• Process your transactions and subscriptions
• Send you service notifications and account communications
• Comply with Australian legal and regulatory obligations
• Train and improve our AI models (with your consent - opt-in only)

5. Data storage and security

Your data is stored in Australia. We use industry-standard encryption for data in transit and at rest. We maintain security controls appropriate to the sensitivity of financial data. We do not sell your data to third parties for any purpose.

6. Disclosure to third parties

We do not sell, trade, or rent your personal information. We may share your information with third parties only in the following circumstances:

• Service providers who assist in operating the Ledgable platform (e.g., cloud hosting, payment processing)
• When required by Australian law or a valid court order
• With your explicit consent (e.g., sharing with your accountant)

7. Your rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Make a complaint if you believe we have breached the APPs
• Export your data at any time
• Delete your account at any time, from Settings → Security on the web or from the mobile app (see section 8 for what happens to financial records we are required to keep)

8. Deleting your account

You can delete your Ledgable account yourself at any time, from Settings → Security on the web, or from the Ledgable mobile app. No email to support is required. We ask for your password first, and we offer you a download of your data before anything is deleted.

Deleting your account and deleting a business’s accounting records are two different things, and Australian law treats them differently. Here is exactly what happens.

Your sign-in and personal details

Removed straight away. That means your password, every browser session, every signed-in mobile device and its notification token, and your two-factor authentication setup. Your name, email address and profile photo are overwritten so they no longer identify you, which also frees your email address to start a new account later if you want one.

One thing does remain: where you entered or approved something in a set of books — a journal entry, a pay run, a BAS — the record of “who did this” stays, credited to “Deleted user”. An accounting audit trail that can be edited by deleting an account is not an audit trail, and businesses are required to keep one.

The books

What happens to each business you have access to depends on who else is left. We show you this for every one of them before you confirm:

• Somebody else owns it too — nothing changes for them. You simply lose your access.
• You were the only owner, but other people are members — the business carries on and ownership passes to the longest-standing remaining member, so a working business is never locked out of its own records.
• You were the only person with access, and there are financial records — the records are kept, read-only, for seven years and then permanently deleted. Nobody can sign in to them during that time, including us for any purpose other than a request like the one described below. We do not use them for anything.
• You were the only person with access, and there are no financial records — the workspace is deleted outright. There is nothing we are required to keep.

Why seven years

The Australian Taxation Office requires most business records to be kept for five years from the date they were prepared or the transaction was completed, and longer in some circumstances. We keep them for seven, which covers the common cases where the five-year clock starts later than people expect. During that period the records are held solely to meet that obligation.

Getting kept records back

When records are kept this way we give you a support reference on the confirmation screen. Save it. If the business later needs its records — for a tax return, an audit, a sale, or simply to start using Ledgable again — contact hello@ledgable.co and quote it. We will ask you to establish that you are entitled to the records before we restore access or provide an export, because the whole point of freezing them is that nobody can reach them without that step.

Your subscription

If a workspace we are about to keep read-only or delete still has a paid subscription, deleting your account cancels it at the end of the period you have already paid for. Nothing renews. We do not refund the remainder of the current period, and we tell you which subscriptions are affected before you confirm. If you want billing to stop sooner than that, cancel in Settings → Billing before you delete. A subscription for a workspace that carries on without you — because another owner or member remains — is left alone: it is no longer yours to cancel.

One thing deletion does not do

It does not remove billing and tax records of what you paid us. Those are our own records, and we are required to keep them for the same statutory period.

9. Cookies and tracking

We use cookies and similar tracking technologies to operate the Service. See our Cookie Policy at ledgable.co/legal/cookie for full details.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email with reasonable advance notice. The most current version is always available at this URL.

11. Contact and complaints

For privacy queries or to exercise your rights under the Privacy Act, contact our Privacy Officer at hello@ledgable.co. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.