Protecting your account
Strong sign-in protection for everyone who uses your books.
- Passwords are never stored in readable form — only as salted, one-way scrypt hashes.
- Two-step sign-in with an authenticator app is available on every account, with one-time recovery codes.
- All traffic to LEDVRA is encrypted in transit with HTTPS, and browsers are instructed to always use a secure connection.
Protecting your data
Your financial records and documents are encrypted and handled carefully.
- Connection credentials, two-step secrets and the documents you upload are encrypted with AES-256-GCM before they are stored.
- Uploaded documents are processed in an isolated process with strict memory and time limits.
- Card details are handled by Stripe, Apple or Google. LEDVRA never receives or stores card numbers.
- We don’t sell your data, show advertising or use third-party tracking analytics.
You stay in control
LEDVRA is designed so that nothing changes in your books without you.
- Nothing is posted to your books without your approval — including AI suggestions and imported activity.
- LEDVRA AI explains and suggests. It never posts, pays or deletes, and its answers are clearly labelled.
- Connections are read-only — LEDVRA can never move money. Bank sign-in happens on Plaid’s secure page, so LEDVRA never sees your bank password.
- LEDVRA support tools never show your transactions, invoices, documents or AI questions.
- Every posting and approval is recorded in your book’s history.
Your data, your choices
Take your records with you, or close your account, whenever you like.
- You can export your books at any time — CSV, Excel, PDF and a full account export.
- You can delete your account. After a 30-day recovery window, everything in it is permanently removed.
- Operational records are kept only for published periods and then removed automatically.
Responsible disclosure
If you believe you’ve found a security issue, please tell us through the support page and choose “Security”. Please don’t include passwords, card numbers or bank details.
More detail
Read the Privacy Policy for what we collect, why, how long we keep it and how to delete it, and the Terms of Service for how the service works.
