Last updated: August 1, 2026 · Effective: August 1, 2026
Privacy Policy
This Privacy Policy explains how LedgerSnap ("LedgerSnap", "we", "us", or "our") collects, uses, discloses, and protects your information when you use the LedgerSnap mobile applications, websites, and related services (together, the "Service"). LedgerSnap is an AI-assisted receipt and expense tracking application for small business owners in Canada and the United States.
By creating an account or using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
Contents
- Who we are
- Information we collect
- How we use information
- Artificial intelligence
- Google user data & Limited Use
- Microsoft / Outlook data
- Statement uploads
- How we share information
- Service providers
- Data retention
- Your rights & deleting data
- Security
- International transfers
- Children
- Changes
- Contact us
1. Who we are
LedgerSnap provides the Service and acts as the controller of the personal information processed through it. You can reach us about privacy at any time at support@ledgersnap.ai.
2. Information we collect
We collect only the information needed to provide bookkeeping and tax-readiness features.
2.1 Information you provide
- Account information: your name, email address, and authentication credentials, managed through our secure authentication provider.
- Business profile: business name, country, province/state, currency, tax registration status (e.g. GST/HST/QST/PST numbers), entity type, reporting preferences, and similar settings used to compute the correct taxes.
- Financial records: receipts, bills, invoices, income records, mileage logs, expense categories, recurring rules, and any notes or corrections you enter.
- Uploaded documents and images: photos and PDFs of receipts, invoices, and statements you capture or upload.
- Support communications: messages you send us.
2.2 Information collected automatically
- Device & usage data: device type, operating system, app version, language, and in-app actions, used to operate, secure, and improve the Service.
- Diagnostics & crash data: error and crash reports to help us find and fix problems.
- Analytics events: high-level product events — for example that an account was created, onboarding was completed, a receipt was captured or confirmed, or a subscription was purchased — so we can understand how the app is used and improve it. These events never include the contents of your financial records: no amounts, vendor names, document images, or email content. Analytics is used only to improve the Service, never for advertising, and we do not sell this data.
- Push notification tokens: a device token so we can send you the reminders and status alerts you've enabled.
2.3 Information from connected services (optional)
- Connected email (Gmail / Microsoft Outlook): if you choose to connect an inbox, we access message metadata and content solely to detect and import receipts, bills, and payment confirmations. See sections 5 and 6.
- Bank or card statements you upload: if you choose to import a statement (PDF or CSV) you export from your bank, we read its transactions to help you reconcile your records. See section 7.
We do not intentionally collect special categories of personal data and ask that you not upload them.
3. How we use information
We use your information to:
- Provide and operate the Service — capturing receipts, categorizing expenses, computing sales tax and income-tax estimates, generating reports and exports, and reconciling transactions;
- Authenticate you and keep your account and data secure;
- Send service messages, reminders, and deadline notifications you've enabled;
- Provide customer support and respond to your requests;
- Monitor, troubleshoot, and improve performance, reliability, and features;
- Detect, prevent, and address fraud, abuse, and security issues;
- Comply with legal obligations and enforce our Terms.
We rely on the following legal bases where applicable: performance of our contract with you, your consent (for optional connections and notifications), our legitimate interests in operating and securing the Service, and compliance with legal obligations.
4. Artificial intelligence
LedgerSnap's AI features are powered by Claude, an AI service provided by Anthropic, PBC ("Anthropic"), a U.S.-based AI provider. When you use an AI feature, we send the relevant content to Anthropic to be processed on our behalf:
- Documents you capture or upload — receipt, bill, and invoice photos or PDFs, and bank or card statements — so details such as vendor, date, amount, and tax can be extracted and expense categories suggested;
- Email content from inboxes you choose to connect — so receipts, bills, and payment confirmations can be detected and imported;
- Your business figures — aggregate amounts the app has already calculated — so it can write your plain-language monthly debrief and answer the questions you ask about your books.
Your permission comes first. The app asks for your explicit consent before any of your data is sent to Anthropic, and you can withdraw that consent at any time in the app (Settings → AI & data policy). If you decline, AI features stay off and you can continue to use manual entry.
- The AI never computes your taxes. All tax, totals, and deductions are calculated deterministically from versioned, dated government rate tables — not by the AI.
- Document and email text is treated strictly as data to be read, never as instructions.
- No training on your data. We do not use your financial data or documents to train third-party foundation models. Anthropic processes your content only to return results to LedgerSnap and does not use it to train its models, per our agreement with them.
- Equivalent protection. Anthropic is contractually bound to protect your data with safeguards that are the same as or equal to those described in this Policy, including confidentiality, security, and strict use limitations. See Anthropic's Commercial Terms and Privacy Policy.
5. Google user data & Limited Use
If you sign in with Google or connect a Gmail account, LedgerSnap's access to and use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we access. With your explicit consent, we request limited Gmail read access to identify and import receipts, bills, and payment confirmations from your email. We also access your basic Google profile (name, email address) when you sign in with Google.
How we use it. We use Gmail data only to detect receipt-related messages, extract receipt and invoice details, and import them into your LedgerSnap account. Email that is not a receipt or financial document is not stored.
Revoking access. You can disconnect your Google account inside the app at any time, and you can review or revoke LedgerSnap's access from your Google Account permissions page. Stored access tokens are encrypted and deleted when you disconnect.
6. Microsoft / Outlook data
If you connect a Microsoft Outlook or Microsoft 365 account, we request limited mail read permissions, used solely to detect and import receipts, bills, and payment confirmations — on the same basis described above for Gmail. Non-receipt email is not stored. You can disconnect at any time in the app and revoke access from your Microsoft account settings. Access tokens are encrypted at rest and deleted on disconnect.
7. Statement uploads
Reconciliation is optional and works entirely from statements you upload yourself. You export a statement (PDF or CSV) from your own bank or card provider and import it into LedgerSnap; we read the transactions only to help you match them against your receipts and income. LedgerSnap does not connect to your bank and never asks for your online-banking username or password. You can delete an imported statement and its transactions at any time.
8. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share information only:
- With service providers who process data on our behalf under contract — see section 9;
- At your direction — for example, when you export data to share with your accountant, or connect an optional third-party service;
- For legal reasons — to comply with applicable law, regulation, legal process, or enforceable governmental request, or to protect the rights, safety, and security of our users, the public, or LedgerSnap;
- In a business transfer — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
9. Service providers
We rely on a small number of trusted service providers to deliver the Service. Each processes data only as needed to perform its function, under contract, and is not permitted to use your data for its own purposes:
| Function | Purpose |
|---|---|
| Cloud hosting & storage | Securely running the app and storing your receipt and document images |
| Authentication | Creating your account and signing you in securely |
| AI processing (Anthropic, PBC — Claude) | Reading, extracting, and categorizing your documents and email content, and narrating summaries — only after you consent in the app (see section 4) |
| Crash & diagnostics | Detecting errors and improving app stability |
| Analytics | Measuring aggregate feature usage (event counts only — never the contents of your financial records) to improve the Service |
| Push notifications | Delivering the reminders and alerts you enable |
| Email connection (Google Gmail, Microsoft Outlook) | Optional inbox connect to import receipts you receive by email |
| App stores (Apple App Store, Google Play) | Processing subscriptions and in-app purchases |
We will update this list as our providers change. To request details of the specific providers we use, email support@ledgersnap.ai.
10. Data retention
We retain your information for as long as your account is active and as needed to provide the Service. Because tax records often must be kept for several years, we keep your financial records while you maintain your account so they remain available to you. When you delete specific records or your account, we delete the associated data as described in section 11. We may retain limited information where required to comply with legal, accounting, or security obligations, after which it is deleted or anonymized.
11. Your rights & deleting your data
Depending on where you live (including under Canada's PIPEDA and applicable US state privacy laws), you may have the right to access, correct, export, restrict, or delete your personal information, and to withdraw consent. You can exercise the core of these rights directly in the app:
- Access & export: Settings → Privacy & data → export a full copy of your data as a downloadable archive.
- Correction: edit any record in the app; an edit history is retained for auditability.
- Delete a connection: disconnect Gmail or Outlook at any time in Settings.
- Delete your account & data: Settings → Privacy & data → Delete account. This permanently removes your account and associated records, including stored receipt images, subject to limited legal retention.
You can also request any of the above by emailing support@ledgersnap.ai. We will verify your request and respond within the time required by applicable law. You may also lodge a complaint with your local data protection authority.
12. Security
We protect your information with industry-standard safeguards, including encryption in transit (TLS) and at rest, encrypted storage of connection tokens, strict per-account data isolation (every record is scoped to your business and verified against your account), least-privilege access controls, and an optional on-device biometric/passcode app lock. No method of transmission or storage is completely secure, but we work continuously to protect your data and will notify you and authorities of a breach where required by law.
13. International data transfers
We operate in Canada and the United States, and our service providers may process data in those and other countries. Where personal information is transferred across borders, we rely on appropriate safeguards and contractual protections consistent with applicable law.
14. Children
The Service is intended for business owners and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
15. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect constitutes acceptance.
16. Contact us
Questions, requests, or concerns about this Policy or your data:
LedgerSnap
Email: support@ledgersnap.ai
Web: https://ledgersnap.ai