Privacy Policy

This policy covers the LEDGEIN marketing website at ledgein.com and the LEDGEIN application at app.ledgein.com. Where a practice uses LEDGEIN to manage information about its own clients, the practice determines how that information is used, and LEDGEIN processes it to provide the service.

• Account information: names, work email addresses and role information for people you invite into your workspace.
• Practice information: your firm's details, configuration and settings.
• Client information: the client records, entity details and services your practice records in LEDGEIN.
• Documents: files requested, uploaded or stored through practice workflows and the client portal.
• Communications: messages exchanged in the context of practice work, and enquiries you send us through this website.
• Operational metadata: tasks, obligations, statuses, timestamps and activity records generated as work moves through the system.
• Integration data: credentials and data exchanged with services you authorise, such as accounting or storage providers.
• Website information: details you submit through our contact and demo forms, and limited technical information needed to serve the site securely.

We use information to:

• provide, operate and support the LEDGEIN platform;
• authenticate users and enforce access permissions;
• maintain records of activity for auditability within a practice workspace;
• operate the integrations a practice has authorised;
• respond to enquiries submitted through this website;
• protect the service and investigate misuse or security issues; and
• meet obligations that apply to us.

We do not sell personal information, and we do not use practice or client information for advertising.

Information a practice records about its own clients belongs to that practice's relationship with those clients. The practice decides what is recorded, who in the practice may access it, and which clients are given portal access. Portal access is scoped to a single client record.

If you are a client of a practice using LEDGEIN and want to know how your information is handled, please contact your practice in the first instance.

When a practice administrator authorises an integration, information is exchanged with that provider to deliver the connected functionality. Credentials and tokens are handled server-side and are not exposed to browser users. A practice can disconnect an integration at any time. Each provider's own privacy terms govern what happens on their side.

Subscriptions and payments are processed through the LEDGEIN application using a third-party payment provider. Card details are handled by that provider; we do not store full card numbers. Billing contact details and invoice records are retained as required to operate the subscription.

The marketing website sets no analytics, advertising or profiling cookies and loads no third-party tracking script. Usage events (such as which marketing page was viewed, or that a call to action was clicked) are handled by an internal abstraction that records only non-identifying values — never your name, email address, phone number or the content of anything you type into a form. See our Cookie Notice for the categories involved.

Information you submit through the contact or demo forms is delivered to LEDGEIN so we can respond to you. It is not passed to an analytics platform.

Access is role-based and enforced server-side, practice workspaces are logically isolated, and connector access to local folders is limited to locations the practice approves. Our security overview describes these controls in more detail, including what we do not claim. No system can be described as completely secure.

Information is retained while your practice holds an active workspace, and for a period afterwards to support offboarding, billing records and obligations that apply to us.

Under review: specific retention periods are being finalised as part of release preparation and are intentionally not stated here yet. Contact us if you need the current position for a procurement or risk assessment.

Practice administrators can view and correct much of their workspace information directly. For access, correction, export or deletion requests that cannot be completed in the application, contact us and we will respond within a reasonable period.

On offboarding, a practice may request deletion of its workspace data, subject to records we are required to retain.

LEDGEIN uses third-party infrastructure and service providers to operate the platform, some of which may process information outside your country.

Under review: we do not state a specific data residency location on this page until it is confirmed. If residency is a requirement for your practice, contact us before you commit.

Questions about this policy, or a privacy request, can be sent through our contact form. For a suspected security issue, please use the Security topic so it reaches the right people quickly.