How Ledger collects, uses, and protects information provided by our users and their connected financial systems.
Ledger is an AI-powered accounting automation platform operated by Serendipity LLC ("Ledger", "we", "us", or "our"). Ledger is accessible at https://ledger.serendipityllc.us. Questions about this policy can be directed to support@serendipityllc.us.
When you sign in with Google, we receive your name, email address, profile photo URL, Google user identifier, and authentication assertion. Ledger restricts access to pre-approved corporate domains; accounts outside those domains cannot create a session.
Ledger allows authorized users to connect third-party accounting and financial systems. When you connect a system, we receive and store:
We record audit events for every read and write performed against your connected data (actor email, action, resource, timestamp, IP address). We collect standard web server access logs and error telemetry via Google Cloud Logging.
We use the information above solely to operate Ledger on your behalf: authenticating you, aggregating financial data for display, reconciling transactions, generating reports, producing AI-generated insights, and sending notifications you have configured. We do not use your financial data to train machine-learning models and we do not sell, rent, or share your information with advertisers or data brokers.
Ledger runs on infrastructure provided by Google Cloud Platform and uses the following sub-processors to operate:
| Provider | Role |
|---|---|
| Google Cloud Platform | Compute, storage, Firestore, Secret Manager, networking (us-east4 / United States) |
| Google Firebase | User authentication (Google Workspace SSO) |
| Intuit | QuickBooks Online data access via OAuth 2.0 |
| Plaid | Bank transaction and balance retrieval (when enabled) |
| Anthropic | Large-language-model inference for reconciliation and insights |
| Twilio SendGrid | Transactional email delivery |
Each sub-processor is bound by its own terms of service and data-processing commitments. Ledger transmits only the minimum data required for the specific task.
Account profiles, connection metadata, transactional cache, and audit logs are stored in Google Firestore in the nam5 multi-region (United States). OAuth access and refresh tokens are stored in Google Secret Manager, encrypted at rest with Google-managed keys. All transport between Ledger and your browser or any sub-processor is encrypted with TLS 1.2 or higher.
Operational data is retained for the active lifetime of your account. When you disconnect a financial system or close your account, we revoke the corresponding OAuth grants and delete the associated tokens. Audit logs are retained for 13 months to support accounting and security obligations.
Ledger does not store full payment-card numbers or PINs and is explicitly out of scope for PCI DSS.
You can disconnect any financial system from the Ledger dashboard at any time. Disconnection revokes the OAuth tokens and removes your ability to retrieve future data from that system. You can request export or deletion of any data Ledger stores about you by emailing support@serendipityllc.us; we will acknowledge within two business days and complete the request within 30 days.
Ledger is not directed to children under 18 and we do not knowingly collect information from anyone under 18.
We may update this policy from time to time. Material changes will be communicated by email to signed-in users at least 14 days before taking effect. The "Last updated" date at the bottom reflects the most recent revision.
Serendipity LLC
Email: support@serendipityllc.us
Platform: https://ledger.serendipityllc.us