Privacy Policy

This explains what LedgerBarn collects, why, who touches it, and how you control it. LedgerBarn is operated by Jerry Potter, doing business as LedgerBarn, in Hillsville, Virginia. Short version: the books are yours, we keep them in your own locked database, and we do not sell anything.

What we collect

• Account details: your business name, your email, the logins you create, and what you do in the app (an audit trail your administrators can see).
• Your books: customers, vendors, invoices, bank transactions, the documents you upload, and everything else you enter or import. Bank files you upload are parsed and kept as register entries.
• Employee information you enter for payroll: names, pay, withholding elections, and, if you choose, Social Security numbers, dates of birth, and bank account numbers for direct deposit. Those three are encrypted at rest (AES-256-GCM) with a key unique to your business and are shown masked.
• Bank connections, only if you turn them on: you sign in to your bank in a window run by Stripe, and LedgerBarn never sees your bank username or password. Stripe gives us each connected account's name, last four digits, and transactions. The lines you add or match become entries in your register; for every other line we keep nothing but the bank's reference number, so it is shown to you once. Disconnect any time from Banking › Match transactions, and Stripe stops reading the account.
• Billing: handled by Stripe. We keep your Stripe customer and subscription ids; your card details go to Stripe and never touch our servers.
• Technical: standard web-server logs (address, page, time) kept briefly for security and troubleshooting. One session cookie keeps you signed in; the app sets no advertising or tracking cookies. The public website may carry a Google Ads tag that tells us an ad led to a sign-up; it never sees your books.

Why we use it

To run the service for you: compute payroll, send the invoices and statements you ask it to send, show you reports, bill your subscription, answer your support questions, and keep the service secure. Nothing else.

Who else processes it

• Stripe for payments, and for bank connections if you turn them on (Stripe Financial Connections). Resend delivers the email you send from the app and our emails to you. Twilio delivers text messages if you turn that on.
• DigitalOcean hosts the servers; Cloudflare fronts the website and protects it.
• Anthropic processes a receipt image, a document page, or a question only when you use the receipt reader, the document binder, or the assistant; the request carries just what that feature needs. Their answers are generated, so check them against your records before you rely on them.

Each of these sees only what it needs to do its job. We do not sell your data, share it with advertisers, or use it to train software.

How it is protected

Each business has its own database and its own encryption key; sensitive employee fields are encrypted with AES-256-GCM. Traffic is encrypted in transit. Nightly backups are kept for fourteen days without the keys that unlock the sensitive fields. Access to the servers is limited to the people who run LedgerBarn.

Your control

• Download everything any time from Settings: every table as spreadsheets and the whole database. This works even when the account is read-only after a cancellation or a failed payment. Would rather we sent it? Email us and we will.
• Correct anything in the app yourself. Delete your account and data by emailing support@ledgerbarn.com from your account's email; we confirm and remove it, backups included, within 30 days.
• After a cancellation your data stays available, read-only, for at least 90 days so you can take it with you.

Children, changes, contact

The service is for businesses and is not directed at children under 13. If we change this policy we post the new date above and email account holders about anything material. Questions or requests: support@ledgerbarn.com.