Privacy Policy

Ping Ledger ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and the choices you have. It applies to our website and the Ping Ledger service.

Account data: name, email address, and role, collected when you register or are invited.

Business data: business name, notification email, and the configuration you provide to connect your accounting platform.

Transaction data: the contents of files you submit by email for processing, including CSV records synced into your accounting ledger.

Integration credentials: OAuth tokens for connected services such as Xero, stored encrypted and used only to perform syncs on your behalf.

Usage data: log data, job metadata, and technical information used to operate and secure the service.

We use your data to:

• Provide, operate, and maintain the service.
• Process and sync transaction records into your connected accounting platform.
• Communicate with you about your account, jobs, and support requests.
• Monitor for abuse, fraud, and security issues.
• Comply with legal obligations.

We process personal data under the following bases: performance of a contract with you, compliance with a legal obligation, our legitimate interests in operating and securing the service, and your consent where given. You may withdraw consent at any time where it applies.

We do not sell your data. We share it only with service providers who help us operate, such as email delivery and accounting platform providers, under written agreements that require confidentiality and compliance with applicable data protection law. We may disclose data where required by law.

Your data may be processed in countries other than your own, including the United Kingdom and the European Union. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your data.

We retain your data for as long as your account is active or as needed to provide the service. Transaction records synced to your accounting platform are governed by that platform's retention. We delete or anonymise data when it is no longer required, subject to legal retention obligations.

We use reasonable technical and organisational measures to protect your data, including encryption of credentials in transit and at rest, access controls, and webhook signature verification. No method of transmission is fully secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to object to or port your data. To exercise these rights, contact us through the support channel within the app.

We use essential cookies and similar technologies to operate the service and keep you signed in. We do not use advertising cookies.

The service is not intended for individuals under 16. We do not knowingly collect data from children. If you believe we have, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes through the service or by email. The "Last updated" date above reflects the most recent revision.

For privacy questions or requests, contact us through the support channel within the app or at our registered business address.