Privacy policy
You upload financial documents, so the only part of this that really matters is what happens to them. Short version: they are stored encrypted in the United States, they are processed by an AI model that does not train on them, you can delete them, and we do not sell anything to anyone.
Last updated July 27, 2026
Who we are
LedgerBox is operated by Lumen Holdings LLC, a limited liability company formed in Wisconsin. For anything in this policy, write to contact@ledgerbox.io or:
N50W35013 Wisconsin Ave
Okauchee, WI 53069
United States
What we collect
Documents you upload
Bank statements, invoices, receipts, pay stubs, purchase orders, and similar files, along with everything extracted from them: transactions, amounts, dates, account numbers, names, and addresses that appear in the document. This is the sensitive part, and it is treated as yours throughout.
Account information
Your email address and name, held by our identity provider. We never see or store your password. If you sign in with Google or a similar provider, we receive only your email address and name from them.
Billing information
Your plan, billing contact, and how many pages you have processed. Card numbers go to Stripe directly from your browser and never touch our servers, so we cannot see them even if asked.
Usage data
Which pages and features you use, plus device and browser metadata. Our analytics only accepts events from a fixed, pre-declared list of names and properties, which means the contents of your documents cannot be captured by analytics even by mistake.
How your documents are processed
This is the section worth reading closely.
When you upload a document, it is stored encrypted in Microsoft Azure in the United States, then sent to an OpenAI model hosted by Microsoft inside Azure to extract the data. It is not sent to OpenAI, to ChatGPT, or to the public OpenAI API. Microsoft is contractually bound not to use your documents to train or improve any model, its own or OpenAI's, and other customers cannot access them.
Microsoft runs automated abuse detection over content passing through its AI services. Where that automated review is inconclusive, a small number of authorized Microsoft employees can review flagged content under controlled access. We applied for an exemption from this and it was declined, so we are telling you plainly rather than implying otherwise. It applies to flagged content only, not to everything you upload.
Because of how our AI deployments are configured, processing may occur anywhere within the United States. Stored data stays in the United States.
Why we process it
- To provide the service you signed up for, which is the extraction itself.
- To bill you correctly, which requires counting pages.
- To keep the service secure and detect abuse.
- To send you service messages, and marketing email you can unsubscribe from at any time.
- To meet legal and accounting obligations.
Who else sees it
We do not sell your data, and we do not share it for anyone else's advertising. The following vendors process data on our behalf, under contract, and only to do the job listed:
| Vendor | What for | What they see | Where |
|---|---|---|---|
| Microsoft Azure | Hosting, storage, databases, and AI document extraction | Uploaded documents, extracted data, and account records | United States (East US) |
| Clerk | Accounts, sign-in, and session management | Email address, name, and authentication metadata | United States |
| Stripe | Payments, subscriptions, and usage billing | Billing contact, plan, and usage counts. Card details go to Stripe directly and never reach our servers | United States |
| Resend | Transactional and marketing email delivery | Email address and message contents | United States |
| Intuit (QuickBooks Online) | Sending extracted transactions, only if you connect the integration | The transactions you choose to send | United States |
| PostHog | Product and marketing analytics | Usage events and device metadata. The event taxonomy is an allowlist, so document contents cannot be captured | United States |
We may also disclose data if the law requires it, or to protect our rights or someone's safety. If our business is sold or merged, your data may transfer with it, and this policy travels with the data.
How long we keep it
Documents and extracted data are kept while your account is active, so you can go back to them. When you delete a document it enters a short recovery window, during which you can undo the deletion, and is then permanently purged from storage. Deleting your account removes your documents and extracted data.
We keep billing and tax records for as long as the law requires, which is typically seven years, even after an account closes. Those records contain invoices and payment history, not your documents.
Security
Data is encrypted in transit and at rest. Access is restricted to the small number of people who need it to operate the service. Documents are isolated per organization, and every request is checked against the organization it belongs to.
We should be honest about the limit of that promise: no service can guarantee it will never be breached. If a breach affects your data we will tell you and the relevant regulators as required by law.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your data, to object to certain processing, and to withdraw consent. Most of this you can do yourself in the app. For anything else, write to contact@ledgerbox.io and we will respond within the time the law allows.
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in California law.
International users
Our infrastructure is in the United States. If you use LedgerBox from outside the United States, your data is transferred to and processed there, which may have different privacy laws than your country.
Children
LedgerBox is for business use and is not directed at anyone under 18. We do not knowingly collect data from children.
Changes
If we change this policy in a way that materially affects you, we will let you know by email or in the app before it takes effect. The date at the top of this page always reflects the current version.