Privacy Policy
Last updated 2026-10-01
In plain English
- We keep your email, your licence key, the tax records you enter, and the files you upload.
- We use it only to run the product for you. We never sell it, and we do not use it to train AI.
- Stripe takes your payment. We never see your card number.
- We ask before any ad or analytics tag loads. You can say no, and the product works the same.
- If you say yes, the Meta Pixel measures our ads. It never gets your key or your numbers. If you then pay, Meta gets a scrambled (hashed) copy of your email to match the payment to an ad.
- A few companies handle data for us so the product works: Stripe, Supabase, Railway, Resend, PostHog, Sentry, Meta.
- Want a copy of your data, or want it deleted? Email [email protected].
- After you delete your account, backups can bring it back for 30 days. After that it is gone for good.
This summary is here to make the page easier to read. It is not the full text. If the two ever seem to differ, the full text below is what counts.
What we collect
- Your account. Your email address and licence key. If you pay, the Stripe customer ID that links your account to your payments.
- What you put in. Your tax profile answers, income, expenses, mileage, and any receipts or files you upload. This is yours, and we process it only to run the product for you.
- How the product is used. Which features are used and which errors happen, so we can fix what breaks.
- Server logs. IP address, browser and the pages requested, used to keep the service running and stop abuse.
Cookies and advertising
When you first visit, we ask before any advertising or analytics tag loads.
You can choose Reject or Accept. The product
works the same either way. We keep your choice in your browser (and in a small
cookie named lp_consent) so we do not ask on every page. To
change your choice, use Cookie choices at the bottom of the
home page.
If you choose Accept, our website and app load the Meta Pixel. It sets cookies and tells Meta that someone visited, started a sign-up, finished a sign-up or paid, so we can measure our Facebook and Instagram ads. It is sent an event name, which plan was picked and, for a payment, the amount. It is never sent your email, your licence key or any figure you type in.
If you choose Accept and then pay, our server also tells Meta about that payment, so the ad that brought you is counted even if a blocker stopped the pixel. That message carries the amount, the plan, and your email address only in scrambled form (a one-way SHA-256 hash), which Meta uses to match it to an ad. If you choose Reject, the server does not send it.
We may also turn on Google Analytics, the TikTok pixel or the LinkedIn Insight Tag to measure ads on those sites. Like the Meta Pixel, none of them loads unless you choose Accept, and none is sent your tax data.
We also note which ad or link brought you here (the utm_ labels
in the link, and Meta's click id if you accept) and attach it to your sign-up
and payment, so we know which ads work. These are labels from our own links,
not information about you. A content blocker stops all of the tags above.
What we do not do
- We do not sell your data.
- We do not use your records to train anyone's AI models.
- We do not see your card number. Stripe handles payment.
- We do not send your tax data to Meta or any other advertiser.
- We do not load advertising or analytics tags until you choose Accept.
Who processes data for us
These companies handle data on our behalf. Each one is here because the product needs it to work.
| Who | For | |
|---|---|---|
| Stripe | Payments and billing | policy |
| Supabase | Database and file storage | policy |
| Railway | Hosting the app | policy |
| Resend | Email (your licence key, receipts, account notices) | policy |
| PostHog | Product analytics and error tracking | policy |
| Sentry | Error reporting, with email addresses, keys and request bodies removed first | policy |
| Meta | Measuring our Facebook and Instagram ads (the Meta Pixel and Conversions API), only after you accept cookies | policy |
Where it is stored, and for how long
Data is stored in the United States. It is kept while your account is open. When you delete your account, your records and uploaded files are erased and any subscription is set to cancel at the end of the paid period. Backups can restore an account for 30 days after deletion; after that, the deletion is permanent.
Your rights
To get a copy of everything we hold about you, or to delete your account, email [email protected] from the address on your account. If you are in a place with data-privacy laws (such as California under the CCPA, or the EU and UK under the GDPR), those rights apply to you, and this is how you use them.
Changes
Material changes — a new kind of data, or a new company that processes it — are announced by email before they take effect.
Ledgerproof is operated by TBG STRATEGIC CONSULTING LLC. Questions about this page: [email protected]. See also the Terms of Service.