1. Who we are and what this Policy covers
LEDVRA is a bookkeeping service for businesses and households, operated by PinnedPros LLC (“LEDVRA,” “we,” “us,” “our”). This Privacy Policy explains what information we collect, how we use and share it, how we protect it, how long we keep it, and the choices and rights you have. It applies to the LEDVRA website (ledvra.com), the LEDVRA mobile app for iOS and Android, and LEDVRA support (together, the “Service”).
This Policy does not cover the services of banks, Plaid, payment processors, app stores or online stores that you choose to connect; their own privacy policies apply to them. If you use LEDVRA for a business, that business is responsible for the information it enters about its own customers, vendors and employees, and we process that information on its behalf to provide the Service.
2. Information we collect
Information you give us. Your name and email address; your password (stored only in protected, one-way form); business or household profile details such as business name, entity type and industry; the accounts you add; transactions, categories, ledger entries, invoices, bills, budgets, notes and reports; documents you upload, such as receipts and bank statements; information about people you invite to a book; and messages you send to support.
Information from services you connect. When you connect a bank or card account through Plaid: account name, type and last four digits, balances, and transaction history for the accounts you select. When you subscribe: subscription status and plan from Stripe, RevenueCat or the Apple App Store or Google Play (we never receive full card numbers). When you connect an online store, such as Shopify: order, payout and fee totals, without your customers’ names, emails or addresses.
Information collected automatically. Sign-in times, device and browser type, IP address, session and security events, app version, and error reports needed to keep the Service secure and working. We do not collect your precise location, contacts, or advertising identifiers.
We do not collect your bank username or password, and we do not ask for Social Security numbers.
3. How we use information
We use information to: provide the Service, including keeping your books, reconciling accounts and preparing reports; create, secure and verify your account, including two-step sign-in and detecting suspicious activity; process subscriptions and enforce plan limits; run the AI features you choose to use; send service, security and account messages; answer support requests; keep an audit history of changes; prevent fraud and abuse; fix problems and improve reliability; and meet legal, tax and accounting obligations.
We do not use your financial information for advertising, we do not build advertising profiles, and we do not sell your information.
5. AI features
LEDVRA AI can read a receipt or statement you upload, suggest categories, and answer questions about your books. AI features run only when you start them and agree on screen, and the screen tells you what will be sent. Requests go to OpenAI or Anthropic under business terms that do not allow them to use your data to train their models. When you ask about your figures, names are replaced by labels and secrets are removed before anything is sent; when you ask LEDVRA to read a document, that document is sent. AI suggestions may be wrong, and nothing changes in your books until you approve it. Never put passwords, authentication codes or bank credentials in an AI request.
6. Bank connections and Plaid
LEDVRA uses Plaid Inc. (“Plaid”) to connect your financial accounts. You must turn on two-step sign-in for your LEDVRA account before you can connect a bank. When you connect an account, you sign in with your bank through Plaid, not through LEDVRA, and LEDVRA never receives or stores your bank username or password. By connecting an account, you acknowledge and agree that Plaid will collect, use and share information about you and your accounts in accordance with the Plaid End User Privacy Policy.
Through Plaid, LEDVRA receives read-only account details, balances and transactions, only for the accounts you choose, and uses them only to keep your books. LEDVRA cannot move money from your accounts. The Plaid access credential is stored encrypted and is never shown to anyone. You can disconnect an account at any time in Settings; LEDVRA then removes the connection with Plaid and deletes the access credential, and does the same for every connection when you close your account. Transactions already imported stay in your books until you delete them or close your account.
8. How we protect information
We protect information with a written security program that includes: encrypted connections (HTTPS/TLS) for all traffic; AES-256-GCM encryption for bank access credentials, two-step sign-in secrets and uploaded documents; passwords stored only as salted one-way hashes; two-step sign-in, required before connecting a bank; protected sessions that expire; owner-only administrative access, with every administrative view and action logged in tamper-evident records; automated security testing before every release; and encrypted, tested backups. Documents are read in an isolated process and are never written to disk unencrypted.
No method of transmission or storage is completely secure. If a security incident affects your personal information, we will notify you and any authorities as required by law, without undue delay.
9. Retention and deletion
We keep your account information, books, documents and bank connections for as long as your account is open, because they are your financial records. Other records are deleted automatically:
- Sign-in and security events: 180 days
- Remembered sign-in devices: 365 days
- Email delivery records: 400 days
- AI usage counts (no content): 400 days
- Saved AI answers: 24 hours
- Temporary document-processing data: deleted as soon as processing ends
When you close your account, you have 30 days to change your mind. After that, your books, documents, bank connections and personal information are permanently deleted, and your Plaid connections are removed. We keep a deletion record with no personal details as proof, and only the information the law requires us to keep, for as long as required. Deleted information can remain in encrypted backups until those backups expire, and is not restored to the Service.
10. Your choices and rights
Consent. When you create an account, you agree to this Policy and our Terms. If we make a material change, we ask you to accept the updated Policy before you continue. Separate, specific consent is asked before any AI feature runs and before any bank is connected.
Controls you have. In Settings, you can view and update your profile, download all of your data, see your active sessions and sign out of them, turn on two-step sign-in, disconnect banks and other services, and close your account. Cancelling a subscription does not close your account.
Requests. You can ask us to access, correct, export or delete your information by contacting us (section 16). We confirm your identity before acting, respond within 30 days, and do not charge for reasonable requests.
11. U.S. state privacy rights
Residents of California and other states with consumer privacy laws have the right to: know what personal information we collect, use and disclose; access and receive a copy of it; correct it; delete it; and not be discriminated against for using these rights. In the past 12 months, we collected the categories of information described in section 2, for the purposes in section 3, and disclosed them only as described in section 4.
We do not sell or share personal information as those terms are defined by California law, and we do not use sensitive personal information to infer characteristics about you. Because we do not sell or share, there is nothing to opt out of, and we treat Global Privacy Control signals as a request not to sell or share. You may use an authorized agent to make a request; we may ask the agent for proof of authority and ask you to confirm your identity. To make a request, contact us (section 16).
13. Children
LEDVRA is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.
14. Where information is processed
LEDVRA is offered to users in the United States. Information is stored and processed in the United States by us and our service providers.
15. Changes to this Policy
When we update this Policy, we change the “Last updated” date at the top of this page. If a change is material, we tell you in LEDVRA and ask you to accept the updated Policy before you continue.
16. Contact us
PinnedPros LLC (LEDVRA). For privacy questions or requests, email localhire@pinnedpros.com or use the secure form on the Support page (send account-specific requests while signed in). Never send passwords, authentication codes, recovery codes, bank credentials or full payment-card numbers.