Privacy Policy

Effective Date: 04/20/2026

LedgerTitan is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal and professional data in compliance with applicable laws, including GDPR and PIPEDA.

1. Information We Collect

We collect:

1. Personal information: Name, email, professional credentials, and contact details.

2. Account and authentication: We do not collect or store a password for LedgerTitan. Sign-in is completed through third-party identity providers (such as Google or Microsoft). We store account identifiers and profile details supplied by those providers (for example name, email, and profile image). To keep you signed in, we issue secure session tokens: a short-lived access token in your browser's local storage and a longer-lived refresh token in an HttpOnly cookie on our API host. JavaScript cannot read the refresh cookie; it is used only to obtain a new access token when the current one expires. If you clear site data or cookies, you may need to sign in again.

3. Client data: Financial documents, files, and data you upload for processing.

4. Technical data: IP address, browser type, and device information as typically processed by our hosting environment for security, fraud prevention, and service delivery.

2. How We Use Your Data

We use your data to:

1. Provide and maintain your account and services.

2. Process and analyze client financial data as authorized.

3. Enhance platform features, including AI capabilities via Azure AI Foundry.

4. Communicate updates, support, and compliance notifications.

5. Ensure security and prevent unauthorized access.

3. Storage and Security

All data is hosted on Microsoft Azure, utilizing Azure Blob Storage for secure file storage with encryption at rest and in transit. Access is controlled through role-based permissions and multi-factor authentication. Our AI features leverage Azure AI Foundry with built-in safeguards to protect sensitive information. We implement industry-standard security measures, including regular audits, data backups, and compliance with ISO 27001 standards. Data is retained only as long as necessary for service provision and legal requirements.

4. International Transfers

Your information may be stored and processed on servers in various countries where we or our subprocessors operate. Where personal data is transferred across borders, we implement appropriate safeguards for lawful transfers, such as Standard Contractual Clauses approved by relevant authorities, reliance on adequacy decisions where available, and other mechanisms permitted under applicable privacy laws.

5. How We Share Your Information

We do not sell or rent your personal information. We may share your data only:

1. With trusted service providers (for example cloud hosting, analytics, identity and authentication, and payment processors), under confidentiality and data-processing obligations consistent with this policy and applicable law.

2. If you connect LedgerTitan with third-party platforms or sign in through third-party identity providers (such as Google or Microsoft), in line with the permissions you grant and those providers' terms and privacy notices.

3. With your explicit consent where required for specific client-related or other processing.

4. If required by law, regulation, court order, or lawful government request, or where we reasonably believe disclosure is necessary to prevent harm, fraud, abuse, or to protect the security of our users or the service.

5. If LedgerTitan is involved in a merger, acquisition, reorganization, financing, or sale of assets, your information may be transferred as part of that transaction; we will provide notice as required by applicable law before your information becomes subject to a different privacy policy.

6. Your Rights

You have the right to access, correct, delete, or export your data. For client data, you must ensure compliance with your professional obligations. Contact us at [email protected] to exercise these rights.

7. Cookies

We use cookies and similar technologies to maintain session security and operate the service (for example an HttpOnly refresh cookie used to renew your session without storing a long-lived token in local storage). You can manage cookie preferences in your browser settings; clearing cookies or site data may sign you out.

8. Changes

We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted here with an updated effective date.