Privacy Policy

Information We Collect

Account Information: When you create an account, we collect your name, email address, phone number (optional), business name, and trade or profession.

Phone Number: If you provide your phone number, it is collected solely for the purpose of sending you transactional and service-related SMS messages through our messaging program (e.g., estimate status updates, project notifications, and account alerts). Your phone number is stored securely and is never sold, rented, or shared with third parties for their marketing purposes.

Usage Data: We collect information about how you interact with Ledger, including features used, pages visited, and actions taken within the app.

Project & Receipt Data: When you create estimates, upload receipts, or manage projects, that content is stored securely to provide our services.

Camera & Photos: Ledger requests access to your device camera solely for the purpose of photographing receipts (for receipt scanning and expense tracking) and capturing project progress photos (to document work on active projects). Photos are uploaded directly to our secure servers and are associated only with your account and the relevant project or receipt. We do not access your photo library, use your camera for facial recognition, analytics, advertising, or any purpose other than the specific features described above. Camera access is requested only when you initiate a receipt scan or project photo, and can be revoked at any time through your device settings.

Push Notifications: If you enable push notifications, we collect a device token from Firebase Cloud Messaging (FCM) to deliver real-time alerts about estimate status, project updates, and labor activity. Your device token is stored securely, used exclusively for delivering notifications you have opted in to, and is automatically removed if it becomes invalid or you uninstall the app.

How We Use Your Information

We use your information to provide, maintain, and improve Ledger’s services. This includes generating AI-powered estimates, processing receipts, syncing with accounting tools, and sending you relevant communications about your account.

We do not sell your personal information to third parties. We may use the content you submit and our AI’s output—including the edits and corrections you make—to improve the Service and to fine-tune our own in-house models. Your data stays in-house: it is never sold or shared with third parties to train their models.

We do not share, sell, or rent your personal information—including your phone number—with third parties for marketing or promotional purposes.

SMS Messaging & Phone Number Privacy

If you opt in to receive SMS messages from Ledger, we use your phone number exclusively to deliver service-related notifications including estimate updates, project status alerts, and account notifications via our SMS messaging program.

Your phone number and SMS consent data are:

• Stored securely using encryption at rest and in transit
• Never sold, shared, or disclosed to third parties for marketing purposes
• Used only by Ledger to send messages you have consented to receive
• Shared only with our SMS delivery provider (Twilio) solely for the purpose of delivering messages to you
• Retained only as long as your account is active or as needed to provide our services

You may revoke SMS consent at any time by texting STOP to any message you receive from us, or by contacting us at contact@ledger-build.com.

Data Storage & Security

All data is encrypted in transit (TLS) and at rest (AES-256). Our infrastructure is hosted on Amazon Web Services (AWS) with industry-standard security controls, regular backups, and access logging. We follow the principle of least privilege for all internal access.

Third-Party Services

OpenAI: We use OpenAI’s API to power AI features such as estimate generation and receipt scanning. Only the specific data needed for each request is sent; under OpenAI’s API terms it is not used to train OpenAI’s models and is retained only briefly for abuse monitoring before deletion.

Twilio: We use Twilio to deliver SMS messages. When you opt in to SMS notifications, your phone number is shared with Twilio solely for message delivery. Twilio processes this data under their privacy policy and does not use it for marketing. No other personal data is shared with Twilio.

AWS: Our application and databases are hosted on Amazon Web Services, which maintains SOC 2, ISO 27001, and other compliance certifications.

Your Rights

You have the right to:

• Access and review the personal data we hold about you
• Request deletion of your account and associated data
• Export your data in a standard format
• Opt out of non-essential communications
• Opt out of SMS messages at any time by texting STOP

Contact

For privacy-related questions or requests, contact us at contact@ledger-build.com