Draft: to be reviewedThis privacy policy is a plain-language draft. It has not been reviewed by a lawyer and may change before LedgerDesk is sold widely.

Privacy

Your books are yours.

What LedgerDesk keeps on your PC, what it sends over the internet and when, and how to ask us about it. Last updated 6 November 2026.

The short version

  • Your books (customers, suppliers, bills, stock, amounts) are stored on your own PC.
  • We cannot see your books unless you turn on cloud backup.
  • The app goes online to look for updates, to check a licence key once you have entered one, and, if you sign in or turn on cloud backup, to reach LedgerDesk's server.
  • Signing in is optional and uses Google. We keep only your Google account's ID and email address.
  • This website has no cookies, no analytics and no trackers.

What stays on your PC

Everything you enter into LedgerDesk is saved in a file on your computer, in your Windows user folder (%APPDATA%\LedgerDesk), or in another folder you choose. That includes your company profile, customers and suppliers with their GSTINs, addresses and phone numbers, bills, payments, stock, and the daily backups the app makes. Purchase-bill attachments, your logo and your signature image are files on your PC too.

You are in charge of this data and of the details of your customers and suppliers in it.

What leaves your PC, and when

1. Update check

When LedgerDesk starts, unless you turn this off in Settings, it asks GitHub (api.github.com) whether a newer version exists, and downloads it from GitHub if you choose to update. GitHub sees your IP address and the app's version number. No data from your books is sent.

2. Licence check

During the free trial the app does not contact our licence service. When you enter a licence key, and after that each time the app starts, it sends the key and a Machine ID to a Google Apps Script web app that we run. The Machine ID is a short code worked out on your PC from its name and network adapter; the name itself is not sent. Google hosts this service and sees your IP address. No data from your books is sent.

3. Cloud backup (in testing, off unless you turn it on)

If you turn on cloud backup, the app sends a copy of your whole books file over an encrypted HTTPS connection to LedgerDesk's server in India (Oracle Cloud, Mumbai). This copy contains everything inside your books, including your customers' and suppliers' details. It does not include purchase-bill attachments, your logo or your signature image. Your shop is named on the server after the company name in your Settings.

  • How long we keep copies: every copy from the last 48 hours, then one copy per day for 30 days. The newest copy is always kept.
  • How your PC is recognised: by a random key stored on your PC. The server stores only a one-way hash of it, not the key itself.
  • What the server logs: the time, the request, the result, the size, your shop and device numbers, and your IP address. Never the key and never anything from inside your books.
  • Who can read the copies: the copies are compressed but not encrypted on the server, so whoever runs the server can read them. Only we run it, and we use the copies only to keep your backup and, if you ask, to give your books back to you.
  • Turning it off: Settings, then Cloud Backup, then Turn Off stops new copies. Copies already sent stay on the server until they age out or you ask us to delete them.

4. LedgerDesk account (Sign in with Google, optional)

LedgerDesk accounts use Sign in with Google. You can also use the app without an account. From your Google account LedgerDesk keeps only two things: its ID (a number Google gives each account) and its email address. Google's sign-in screen may say it shares your name and profile picture; we do not keep them. We get no access to your Gmail, Google Drive, contacts or anything else in your Google account. We use the ID and email address only to link your PC and your phone to your shop, so that the phone can show your PC's books.

  • A key for each device: each PC or phone you sign in on gets its own random key. On the phone it is kept in Android's secure storage and is left out of the phone's backups.
  • Signing out: signing out on a PC or phone revokes that device's key on our server, so it stops working. Your other devices stay signed in. If the device is offline when you sign out, it deletes the key from itself all the same; message us and we will revoke it on the server.

5. AI bill scan (next update, off unless you choose a provider)

If you choose an AI provider for bill scanning, the bill photo or PDF you pick is sent to that provider with your own API key, under that provider's terms. If you choose Ollama, the bill is read on your own PC and not sent anywhere. We do not receive the bill.

6. Sharing a bill

When you share a bill on WhatsApp or by e-mail, LedgerDesk hands the PDF to that app. What happens next is between you, that app and the person you send it to. We do not receive a copy.

This website

This website sets no cookies and uses no analytics, ads or third-party scripts. Our hosting provider keeps normal server logs, which include IP addresses, to run and protect the site. Our WhatsApp links open WhatsApp, which is run by Meta under its own privacy policy. Downloads come from GitHub.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

  • tell you what personal data about you we hold and how we use it;
  • correct or update it;
  • delete it, including cloud backup copies of your books;
  • answer a complaint (grievance) about how we handle it.

For data that stays on your PC, you can view, change or delete it yourself in the app. To ask us anything, message us on WhatsApp at +91 98914 40856. We will reply as soon as we can.

Changes

If we change this policy, we will update this page and the date at the top. If a change affects what the app sends, we will say so in the app's update notes.