Privacy Policy

Information you provide directly

• Account information: name, email address, and password when you create an account.
• Business information: business name, entity type, state of incorporation, and EIN (for tax filing features).
• Payment information: billing details for your EZ Ledgr subscription (processed by our payment provider; we do not store card numbers).
• Communications: any messages you send to our support team.

Financial data (via Plaid)

When you connect your bank account, we use Plaid Technologies, Inc. to retrieve your financial data. With your explicit consent, we may collect:

• Account balances and account identifiers
• Transaction history (descriptions, amounts, dates, merchant names)
• Account type and institution name

We do not collect or store your bank login credentials. Plaid handles authentication directly with your financial institution using read-only access. See Section 3 for full details.

Automatically collected information

• IP address, browser type, and device information
• Pages visited, features used, and time spent in the app
• Error logs and performance data

We use the information we collect to:

• Provide the service: power bookkeeping, invoicing, bank sync, mileage tracking, tax filing, and all other EZ Ledgr features.
• Categorize transactions: automatically classify expenses and income in your ledger.
• Send you important notices: account confirmations, payment receipts, and security alerts.
• Improve the product: analyze usage patterns to fix bugs and build new features.
• Comply with legal obligations: respond to lawful government requests and fulfill our regulatory duties.

EZ Ledgr uses Plaid to enable secure bank connections. When you choose to connect a financial account:

• You will be shown a clear disclosure and asked for your explicit consent before any data is retrieved.
• Plaid connects directly to your financial institution using read-only access — we cannot move money or make changes to your accounts.
• Your bank credentials are never shared with or stored by EZ Ledgr.
• Financial data retrieved through Plaid is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access to your financial data is limited to the EZ Ledgr engineering team on a strict need-to-know basis, protected by multi-factor authentication.

Plaid's handling of your data is governed by Plaid's End User Privacy Policy.

We share your information only in these limited circumstances:

Service providers

We work with trusted third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Plaid — bank account connectivity
• Supabase — database and authentication infrastructure
• Vercel — application hosting
• Resend — transactional email delivery
• Stripe — payment processing
• Google (Google Maps Platform) — driving distance estimates for mileage entries

Legal requirements

We may disclose your information if required by law, court order, or to protect the safety and rights of our users or the public.

Business transfers

If Scalable Innovations LLC is acquired or merged with another company, your information may be transferred. We will notify you before your data is subject to a different privacy policy.

We implement industry-standard security measures to protect your information:

• Encryption in transit: All data between your browser and our servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: All consumer financial data is stored using AES-256 encryption.
• Access controls: Production systems are protected by multi-factor authentication and role-based access control. Only authorized personnel can access your data.
• Vulnerability management: We regularly scan our systems and perform annual third-party security testing.
• Incident response: We maintain a documented incident response plan and will notify affected users promptly in the event of a breach.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@scalable-innovations.com.

How long we keep your data

• Account data: Retained while your account is active and for 2 years after closure.
• Financial transaction data: Retained for 7 years to satisfy financial recordkeeping requirements, then securely deleted.
• Application logs: Automatically purged after 90 days.

Requesting deletion

You can request deletion of your account and personal data at any time by:

• Contacting us at security@scalable-innovations.com to request account deletion

We will complete your deletion request within 30 days and send you a confirmation. Note that some data may be retained where required by law (e.g., tax records) or to resolve active disputes.

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at security@scalable-innovations.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.

California residents have additional rights under the CCPA/CPRA. Texas residents may have rights under the Texas Data Privacy and Security Act (TDPSA). We honor these rights for all eligible users.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the product is used. We do not use third-party advertising cookies.

• Essential cookies: Required for authentication and security. Cannot be disabled.
• Analytics cookies: Help us understand feature usage and improve the product. You can opt out in your account settings.

EZ Ledgr is designed for small business owners and is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, please contact us immediately at security@scalable-innovations.com.

EZ Ledgr can estimate the driving distance for a mileage entry using the Google Maps Platform. When you ask for a distance estimate, we send the addresses involved to Google so it can calculate the distance. These are your business address, the destination (for example, a merchant address from a receipt), and any starting address you type. Google's handling of that information is governed by the Google Privacy Policy.

• We save the miles you accept, along with the origin and destination text, on the trip record.
• We do not keep Google's response. We save only the miles you accept or type.
• Our lookup log keeps only the outcome of each request and who made it, not the addresses.

You do not have to use a lookup. You can type the miles manually instead.

We may update this policy periodically. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to your registered address
• Display an in-app banner for 30 days after the change

Your continued use of EZ Ledgr after the effective date of any changes constitutes your acceptance of the updated policy.