Privacy Policy

Ledger Bridge ("we", "us") converts crypto tax exports (Koinly, Summ, and similar) into balanced accounting journals you download as Xero- and QuickBooks-ready files, or push directly if you connect your Xero or QuickBooks Online account. This policy describes what we collect, why, and how it's handled.

What we collect

• Account information. Your name, email address, and either a hashed password or an identity federated through Google or another sign-in provider you choose.
• The files you upload. Transaction history and capital-gains reports from Koinly, Summ, or a similar source — this can include wallet addresses, transaction hashes, counterparties, and amounts. This data is yours; we process it to build your chart of accounts, journals, and reports. The original file itself is also stored, encrypted at rest, so you can re-download exactly what you uploaded at any time — you can delete a stored copy yourself from Data sources.
• Connected accounting software. If you connect Xero or QuickBooks Online, we request only the scopes needed to read your chart of accounts and post manual journal entries. OAuth tokens are encrypted at rest and only ever used on your behalf, for the workspace you connected them to.
• Billing. Purchases are processed by Stripe. We never see or store your card number — Stripe handles that under its own privacy policy.
• Security data. If you enable two-factor authentication, we store an encrypted TOTP secret and hashed backup codes. We also keep an activity log of security events (sign-in, 2FA changes, password resets), journal edits, exports, and billing/membership changes, scoped to your account and workspaces.
• API tokens. If you create an API token (for an AI/MCP client to read or stage edits), it's stored hashed — like a password — and scoped to exactly the read/write permissions you chose when you created it.
• Support access. If you ask support for help and explicitly grant temporary access, we clone an isolated copy of the relevant workspace for support staff to work from. Nothing changes in your real books unless you review and approve the proposed fix; the copy is deleted automatically once the grant expires or you revoke it.
• Basic technical data. A session cookie to keep you signed in, and a local, device-only theme preference. We do not use advertising or tracking cookies.

Why we collect it

Solely to run the service you're using: building your journals, posting them to the accounting software you connect, billing you for what you buy, keeping your account secure, and giving you an audit trail of what happened in your own workspace.

Who we share it with

We don't sell your data, and we don't share it for advertising. We use a small number of processors to run the service:

• Stripe, to process payments.
• An email provider, to send password-reset links and sign-in codes you request.
• Xero, QuickBooks Online, or Google — only if and when you explicitly connect one, and only for the account you connected.
• Our hosting provider, to run the application and database.

How long we keep it

We retain your uploaded data, journals, and account information for as long as your account is active. Security/activity log entries are kept for audit purposes. A support-copy clone is deleted automatically once its access grant expires. You can ask us to delete your account and associated data at any time (see Contact below).

Your controls

• Disconnect Xero or QuickBooks at any time from Settings → Integrations.
• Revoke any API token immediately from Settings.
• Enable or disable two-factor authentication from Settings.
• Request a copy or deletion of your data by contacting us.

Security

Connections are encrypted in transit (HTTPS). OAuth tokens and two-factor secrets are encrypted at rest. Passwords are hashed, never stored in plain text. We support two-factor authentication and recommend enabling it.

Changes to this policy

If we make a material change to this policy, we'll update the date at the top of this page.

Contact

Questions about this policy, or a request to access or delete your data: team@ledgerbridge.si