Privacy Policy

LedgerLou is an AI assistant (“Lou”) that helps you keep your QuickBooks Online books tidy. It is a product of Neperian Inc. LedgerLou is an independent application. It is not affiliated with, sponsored by, or endorsed by Intuit Inc., and “QuickBooks” and “Intuit” are trademarks of Intuit Inc.

We collect the following categories of information:

• Account information. Your name, email address, and authentication credentials when you create an account or join the beta.
• QuickBooks Online data.When you connect a QuickBooks Online company, we access accounting data through Intuit’s API using the com.intuit.quickbooks.accounting scope — for example chart of accounts, transactions, invoices, bills, vendors, customers, and journal entries — so that Lou can read your books and propose changes.
• Conversations and instructions. The messages you send to Lou, the standing instructions you set, and the edits you approve or reject.
• Billing information. Subscription tier and usage-credit balances. Payment card details are handled directly by our payment processor (Stripe); we do not store full card numbers.
• Usage and device data. Log data, IP address, browser type, and product-analytics events used to operate, secure, and improve the Service.

We use your information to:

• Provide the Service — let Lou read your QuickBooks data, draft proposed changes, and, only after your approval, write approved changes back to QuickBooks.
• Authenticate you, maintain your session, and keep your account secure.
• Process billing and manage usage credits.
• Provide support, send service-related notices, and respond to your requests.
• Monitor, debug, and improve the reliability, safety, and quality of the Service.
• Comply with legal obligations and enforce our Terms.

LedgerLou never changes your books behind your back. Every write to QuickBooks Online is presented to you as a proposed change and is held until you explicitly approve it. You can review, edit, or reject any proposal before it is applied.

We do not sell your personal information or your QuickBooks data. We share information only with the service providers below, each engaged to help us operate the Service and each bound by confidentiality and data-protection obligations:

• Intuit Inc. — QuickBooks Online, the source of the accounting data you connect.
• Anthropic, PBC— provides the Claude AI models that power Lou. Relevant portions of your QuickBooks data and your conversations are sent to Anthropic to generate Lou’s responses and proposed changes. Anthropic processes this data to provide the model output and, per its commercial terms, does not use it to train its models.
• Supabase — database, authentication, and storage.
• Vercel — application hosting (United States region).
• Stripe — payment processing.
• Resend — transactional and account email.

We may also disclose information when required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

Our access to and use of QuickBooks Online data is limited to providing the Service to you. We:

• access only the data needed to perform the tasks you ask of Lou;
• do not sell, rent, or share QuickBooks data with third parties for their own marketing or advertising;
• do not use QuickBooks data to build or train our own machine-learning models;
• retain QuickBooks data only as long as your company stays connected, or as needed to comply with law (see Retention).

You can disconnect a QuickBooks company at any time from within the Service or from the Apps page in QuickBooks Online. Disconnecting revokes our access tokens so we can no longer reach that company’s data. You may also request deletion of your account and associated data by emailing privacy@ledgerlou.com. We will delete or de-identify your data within 30 days, except where we are required to retain it by law.

We keep account and QuickBooks data while your account is active and your company is connected. After disconnection or account deletion we delete or de-identify the data within 30 days, except limited records we must retain for legal, tax, accounting, or fraud-prevention purposes.

We protect your information with industry-standard safeguards, including encryption in transit (TLS), encryption of credentials and OAuth tokens at rest, access controls, and the approval-gating of all write operations. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify you of material incidents as required by law.

We are based in Canada and our infrastructure and subprocessors are located in Canada and the United States. By using the Service you consent to the transfer and processing of your information in these countries, which may have different data-protection laws than your own. We rely on appropriate safeguards for such transfers where required.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to withdraw consent, or to object to certain processing. Canadian users have rights under PIPEDA; users in the EEA/UK and California have rights under the GDPR/UK GDPR and the CCPA/CPRA respectively. To exercise any right, contact us at privacy@ledgerlou.com. We will not discriminate against you for exercising your rights.

We use strictly necessary cookies to keep you signed in and to secure the Service, and limited analytics to understand product usage. We do not use advertising cookies.

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.

We may update this Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised Policy.

Neperian Inc.
1001-403 Bank St
Ottawa, Ontario K2P 1Y6, Canada

Privacy: privacy@ledgerlou.com
Support: support@ledgerlou.com