Privacy Policy

Effective October 6, 2026 · Last updated October 6, 2026

1. Who this covers

This Privacy Policy explains how Leon Link ("we," "us," "our") handles personal information in Ledgerline: the website at app.leonlink.net, the Ledgerline apps, the customer portal and related services (the "Service"). It applies to:

• Account holders: businesses and the people who create or use a Ledgerline workspace, including team members.
• End customers: the customers of Ledgerline businesses, whose details the business stores in Ledgerline or who use the customer portal, booking page or invoice payment pages.
• Visitors to our public pages.

For end-customer information, the Ledgerline business is in charge of the data (the "controller"), and we process it on the business's behalf. If you are an end customer, see section 10.

2. What we collect

Information you give us

• Account details: business name, email address, password (stored only as a salted scrypt hash, never in plain text), and team members' names, emails and access levels.
• Business settings: business phone, email, address, logo, tax rates, price list and similar settings. If you connect your own Stripe account, we store the keys you provide so we can create payment links for your invoices.
• Business records ("Your Data"): the customers, contact details, service addresses, requests, estimates, jobs, schedules, invoices, payments, notes, photos, files and messages that you or your team enter.
• Communications with us: emails and support requests you send to info@leonlink.net.

Information from end customers

• When an end customer uses a booking page or customer portal, we collect what they submit, such as name, phone, email, service address, request details, estimate approvals and messages, and we store it in that business's workspace.

Information from payment processing

• Subscriptions: Stripe processes your Ledgerline subscription. We receive your Stripe customer ID, plan, billing period and payment status. We do not receive or store full card numbers.
• Invoice payments: when an end customer pays a business's invoice, Stripe processes the card. We receive confirmation of the payment (such as amount, date and status) so the invoice can be marked paid.

Information collected automatically

• Technical data: our hosting and database providers process standard server data, such as IP address, browser type, device information, pages requested and timestamps. It is used for security, troubleshooting and keeping the Service running.
• Cookies and local storage: see section 6.

We do not use third-party advertising trackers, and we do not build advertising profiles.

3. How we use information

• To provide the Service: running your workspace, scheduling, sending estimates, invoices, reminders, portal links and review requests you ask us to send, and processing payments.
• To manage accounts and billing, including subscriptions, receipts, failed payments and password resets.
• To provide support and respond to your requests.
• To keep the Service secure: preventing fraud, spam and abuse, and enforcing our Terms.
• To maintain and improve the Service, for example by fixing bugs and understanding which features are used.
• To send you important service notices, such as changes to terms, prices or security. We will only send you marketing email with your consent or where the law allows, and you can unsubscribe at any time.
• To comply with the law and protect our rights.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use Your Data or your customers' information to train third-party AI models.

4. SMS and mobile numbers

When a Ledgerline business sends texts to its customers, Twilio delivers those messages. We use mobile numbers only to deliver the messages the business sends and to honor opt-outs.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third party, except the service providers that deliver the messages (such as Twilio and wireless carriers). Reply STOP to any message to opt out, or HELP for help.

5. Who we share it with

We share personal information only as needed to run the Service, with:

• Service providers who process data for us under contracts and confidentiality duties: Vercel (hosting), Neon (database), Stripe (payments), Twilio (text messages), Resend (email delivery), and Google (only when you send a customer to your Google review page).
• The business and its customers: the Service shows end customers the information a business chooses to share with them, such as estimates, invoices and portal content, and shows businesses what their customers submit.
• Legal and safety reasons: when we believe in good faith that the law, a valid legal process or a government request requires it, or that it is needed to protect the rights, property or safety of our users, the public or Leon Link.
• Business transfers: if Leon Link or Ledgerline is merged, acquired or sold, information may transfer as part of that deal. This policy, or one at least as protective, will continue to apply, and we will notify you.
• With your permission: any other sharing you direct or agree to.

6. Cookies and local storage

• Login cookie: we set one essential cookie (ll) that keeps you signed in. It is signed to prevent tampering and is required for the Service to work.
• Local storage: the app saves some preferences and cached data in your browser or device so it loads faster and works with a weak signal. Clearing your browser data removes it.
• We do not use advertising or cross-site tracking cookies. Because of that, we do not show a cookie banner, and there is nothing to opt out of beyond the essential login cookie.

7. How long we keep it

• Active workspaces: we keep Your Data while your workspace is active, including on the free workspace.
• After you cancel a paid plan: your data stays available in the free workspace, so you can come back or export it.
• Deletion requests: the workspace owner can email info@leonlink.net from the account email to have the workspace and its data deleted. We delete it from our live systems within 30 days. Copies in provider backups expire on those providers' normal backup cycles.
• Inactive free workspaces: we may delete a free workspace that has had no sign-ins for 24 months. We will email the owner at least 30 days first.
• What we must keep: we may keep billing and transaction records, and anything else the law requires, for as long as the law requires, usually up to 7 years for tax records.

8. Security

We protect information with encryption in transit (HTTPS), hashed passwords, signed session cookies, access limited to what is necessary, and reputable infrastructure providers. Card data is handled by Stripe, a PCI DSS Level 1 certified provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects your personal information, we will notify you and the authorities as the law requires.

9. Your choices and rights

• Access and export: workspace owners can export customers, jobs, invoices and estimates to CSV from Settings at any time.
• Correct: you can edit most information directly in the app.
• Delete: ask for deletion as described in section 7.
• Marketing: unsubscribe from any marketing email with the link in it. Service notices will still be sent.
• State privacy rights: depending on where you live, for example Kentucky, California, Virginia, Colorado or another state with a consumer privacy law, you may have the right to know, access, correct, delete or get a portable copy of your personal information, and to opt out of the sale of personal information, targeted advertising or certain profiling. We do not sell personal information or use it for targeted advertising. To make a request, email info@leonlink.net. We will verify your request with your account email, respond within the time the law requires, and not treat you differently for using your rights. You may use an authorized agent where the law allows, and you can appeal a decision by replying to our response.

10. If you are a customer of a Ledgerline business

If a business you hired uses Ledgerline, that business decides what information about you is stored and how it is used, and its own privacy practices apply. For requests to access, correct or delete your information, please contact that business first. If you cannot reach them, email info@leonlink.net and we will pass on your request or help where we can. To stop texts, reply STOP to any message.

11. Children

Ledgerline is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version here and change the "Last updated" date. If a change is material, we will notify workspace owners by email or in the app before it takes effect.

13. Contact

Privacy questions or requests: info@leonlink.net. Leon Link, Rineyville, Kentucky, USA.