Controller or business activities
Website visits, inquiry forms, resource signups, sales follow-up, account contacts, checkout and billing administration, support communications, security records, and other direct business interactions.
Privacy policy
Privacy Policy
How Ledgewave handles personal information.
This Privacy Policy explains how Ledgewave handles personal information through its public website, sales and support interactions, account and billing administration, and related business operations. It also explains the different role Ledgewave may have when processing customer-provided personal data inside the product on a business customer's instructions.
Effective July 13, 2026
Website and business administration
B2B service context
Scope
What this policy covers.
Effective date: . This policy applies to personal information Ledgewave handles for its own website, sales, account, billing, support, security, and business-administration purposes. “Ledgewave” means the business operating this site and identified as the seller in the applicable checkout receipt, invoice, order, or direct written notice.
Customer-directed product processing
When a business customer submits personal data to the product and determines why and how it is processed, that customer is responsible for its instructions and notices. Ledgewave processes that data as described in the Terms of Service, Data Processing Addendum, and any applicable order.
Notice At Collection
Categories collected, sources, purposes, and retention criteria.
This section is the site's notice at or before collection. The categories collected depend on the interaction. Ledgewave collects information directly from you or your organization, automatically from your browser or device, from payment and other service providers, and from business sources that lawfully provide professional contact information. Please do not submit confidential customer records, financial account details, Social Security numbers, payment card numbers, health information, or other specially regulated data through public website forms.
Professional and contact information
Name, work email, company, role, team, systems, invoice volume, implementation priorities, workflow notes, communication preferences, and other information submitted through forms or correspondence. This is used to respond, provide requested materials, evaluate business fit, and manage the relationship.
Technical and usage information
IP address, browser and device information, referring and visited URLs, traffic source, event timing, log data, and similar identifiers may be received by hosting, security, or analytics services. This is used to deliver, secure, troubleshoot, measure, and improve the site.
Account, billing, and transaction information
Plan choice, billing interval, subscriber email, organization name, transaction identifiers, payment status, invoices, and related records may be received from checkout and payment providers. Payment card details are entered on the payment provider's hosted service rather than the public Ledgewave site.
Communications and support records
Requests, messages, follow-up notes, consent or preference records, and support or security correspondence may be kept to manage the conversation, provide support, document choices, and maintain business records.
Customer content
Product customers may submit receivables, invoice, contact, workflow, forecast, or related business data. The exact content is controlled by the customer and should be limited to data the customer is authorized to provide. Product processing is further described in the Data Processing Addendum.
Sensitive information
The public forms are not designed for sensitive personal information. The product must not be used for specially regulated or highly sensitive data unless an order or written agreement expressly confirms that the service is configured and authorized for it.
How We Use Information
We use personal information for identified business purposes.
Depending on applicable law and the interaction, the legal basis may be performance of a contract or steps requested before a contract, consent, compliance with legal obligations, or legitimate interests such as operating and securing the site, responding to business inquiries, administering customer relationships, and improving services. Where consent is the basis, it may be withdrawn without affecting processing that occurred before withdrawal.
Main uses
- Respond to demo requests, resource signups, and other inquiries
- Provide requested materials, account administration, updates, and support
- Process and document checkout, subscription, billing, and cancellation activity
- Operate, maintain, troubleshoot, and secure the website
- Measure and improve the site when analytics is lawfully enabled
Business operations uses
- Manage internal records of inquiries and communications
- Evaluate product interest, implementation needs, and service configuration
- Comply with legal obligations and protect legal rights
- Investigate security incidents, abuse, or fraudulent activity
- Process customer content on documented business-customer instructions
How We Disclose Information
We may disclose information to service providers and in limited legal or transaction contexts.
Ledgewave does not disclose personal information merely because it is collected. Disclosures are limited to the purposes described here, customer instructions, a transaction involving the business, or legal and security needs.
Service providers
Providers may help host and operate the site, receive form submissions, process checkout and payments, store records, provide analytics when enabled, or support business communications. The Subprocessor Disclosure identifies website providers visible in the current implementation and the limits of that list.
Legal and security reasons
We may disclose information if needed to comply with law, respond to legal process, protect the site, prevent fraud, or defend the rights, safety, or property of Ledgewave or others.
Business transfers
If Ledgewave is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be disclosed as part of that transaction subject to appropriate confidentiality and legal protections.
Sale and targeted advertising
Ledgewave does not knowingly sell personal information for money and does not use the current public site for cross-context behavioral advertising. This statement depends on keeping advertising features, provider links, Signals, and data-sharing settings consistent with the site's consent controls. If those practices change or an opt-out becomes legally required, this notice and the available controls will be updated.
Third-party infrastructure
The hardened website uses Cloudflare for static hosting, the same-origin Worker API, and D1 request records; Stripe for hosted checkout and billing; optional consent-based Google Analytics; and an authenticated Google Apps Script and Google Sheets relay when public forms are enabled. The optimized build serves its fonts from the website and does not request Google Fonts. Those services may receive data as described in this policy and their own terms. Product vendors are confirmed separately for each customer deployment.
Site Technologies And Choices
Essential delivery, analytics, consent, and browser signals.
The site and its providers may use server logs, cached files, browser storage, tags, and similar technologies to load pages, protect the service, support forms, and remember necessary state. Technologies that are not strictly necessary must be handled according to the consent or opt-out rules that apply where the visitor is located.
Google Analytics
Google Analytics is disabled unless a measurement ID is deliberately configured after the property settings are reviewed. If configured, it loads only after an affirmative analytics choice. The site removes URL query strings from analytics page and link data, does not send form-field contents, and disables Google advertising signals and personalization in its tag configuration. Property-level retention, regional controls, advertising links, and provider-sharing settings must remain consistent with these public commitments.
Consent and withdrawal
When analytics is configured, it remains off until a visitor chooses Allow analytics. The banner provides equally available allow and reject choices, and Cookie settings appears in the footer. You can later change or withdraw that choice; withdrawal stops the site's analytics event calls and removes first-party Google Analytics cookies that the site can access.
Browser controls, DNT, and GPC
You can use browser settings or extensions to restrict cookies and similar storage, although some site functions may be affected. When this site detects an enabled Global Privacy Control or browser Do Not Track signal, optional analytics remains off by default even if an earlier stored preference allowed it. Ledgewave does not use this public site for cross-context behavioral advertising.
Retention And Security
Retention depends on purpose, contract, risk, and legal obligations.
Retention framework
- General website inquiries: the hardened request store defaults to 365 days from submission.
- Privacy-rights requests: request and lifecycle records default to 730 days so the handling record can be documented where applicable.
- Billing and cancellation requests: request records default to 2,555 days because they may support subscription, accounting, dispute, and legal records.
- Checkout and consent records: incomplete intents default to 30 days; completed transaction and consent records default to 2,555 days.
- Technical records: pseudonymized rate-limit entries default to 24 hours and Stripe webhook verification records default to 180 days. Analytics is disabled unless separately configured, in which case the property retention setting must be disclosed and aligned with this policy.
- Customer content: retained for the service term and handled after termination under the order and Data Processing Addendum.
- Legal and security records: retained as needed to investigate incidents, enforce agreements, preserve evidence, or comply with law.
Production settings and any Google Apps Script or Google Sheets copy must match the adopted schedule. A period may be shortened when the record is no longer needed or extended for a legal hold or binding obligation; a material routine change requires an updated notice. Records are deleted, de-identified, or placed beyond routine use at the end of the applicable period, subject to backup cycles and legal holds.
Security
- Ledgewave is responsible for using safeguards appropriate to the information, service configuration, and applicable agreement.
- No website, transmission method, or storage system is completely secure, so we cannot guarantee absolute security.
- The public Security Overview intentionally does not claim certifications or specific production controls that have not been verified.
International Processing
Providers may process information in more than one country.
Depending on the visitor, customer, provider, and production configuration, personal information may be processed in countries other than the place where it was collected. Those countries may have different privacy laws. Before making a restricted international transfer, Ledgewave must identify and use a transfer mechanism or other safeguard required by applicable law. This public policy does not claim that a particular transfer framework, hosting region, or contractual module is already in place. Customers that require a specific location or transfer mechanism should confirm it in the order or DPA before submitting personal data.
Your Choices And Rights
Depending on where you live, you may have privacy rights regarding your personal information.
Subject to applicable law, verification, and permitted exceptions, rights may include access, correction, deletion, portability, restriction or objection, withdrawal of consent, and information about collection, disclosure, sale, or sharing. Applicable law may also provide a right to appeal a decision and to receive equal service without unlawful discrimination for exercising a privacy right.
Marketing and updates
You can ask us to stop sending marketing or resource updates at any time by following the opt-out instructions in the message or by contacting us through the methods described below.
Privacy requests
Use the privacy request form below. State the right you want to exercise and the context in which you interacted with Ledgewave. Do not send identity documents, payment card details, or customer records unless specifically requested through a secure method. Ledgewave may request information reasonably necessary to verify the request and authority of an agent.
California rights
If and to the extent the California Consumer Privacy Act applies, California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against. Ledgewave does not knowingly use public website forms to collect sensitive personal information for purposes that require a limitation right.
Response and appeal
Ledgewave will respond within the period required by applicable law. If a request is denied and local law provides an appeal right, reply through the same contact route with Privacy Appeal and explain the decision being appealed. If the form does not display or you do not receive a usable confirmation, submit the request again and retain a copy for your records.
Regulatory complaints
Where applicable, you may complain to the privacy or data-protection authority where you live or work, or where you believe a violation occurred. In the United States, the relevant state attorney general or privacy agency may also accept complaints. Contact Ledgewave first if you would like an opportunity to address the concern directly.
Children
This site is intended for business users.
The site is not directed to children under 13, and we do not knowingly collect personal information from children through this site. If you believe a child has provided personal information through the site, contact us so we can review and address it.
Changes And Contact
Best contact path
What to include
Policy updates
We may update this policy as the site and its data practices evolve.
If we make material changes, we will post the revised policy with a new effective date and provide any additional notice required by law. For privacy questions or requests, use the privacy request form. The seller's legal identity appears on applicable checkout, invoice, order, or direct contracting materials.
Use the privacy request form and keep the displayed reference number.
Your name, contact details, and the specific request or question you want us to address.
The effective date at the top shows when this version applies.
Useful next pages
Move back into the product flow or submit a request if you need a response.
Use the form for a privacy question or rights request.
Review the baseline terms for customer-directed personal data.
See the providers used by the public website and the limits of the product-vendor list.
Review the site's current accessibility status and feedback route.