Privacy Policy

Last updated 3 September 2026

Ledgerlift is operated by Rijak Arora ("we", "us"). This policy explains what we collect, what we do with it, and who else touches it. Questions: arorarijak06@gmail.com.

What we collect

• Account details: your email address, an optional name, and a hashed password. We never store your password itself.
• Documents you upload: invoices and receipts you submit for extraction.
• Extracted data: the fields read from those documents - vendor, invoice number, dates, currency, subtotal, tax, shipping, total, and line items - plus the original filename and the raw extractor output.
• Basic operational logs: standard server logs needed to run and debug the service.

What we do not keep

We do not retain the uploaded file itself. Your document is sent for processing, the extracted fields are saved to your account, and the file's contents are not written to our database or stored on disk by us afterwards.

Who else processes your documents

To read a document we send it to Google (the Gemini API). This is the core of how the service works - your document contents leave our systems and are processed by Google.

Please read this before uploading anything sensitive. We currently use Google's unpaid API tier. Under Google's API terms for unpaid services, Google uses content submitted to the API to provide, improve and develop Google products and services, and human reviewers may read, annotate and process API input and output (disconnected from your account and API key). This means the contents of documents you upload may be reviewed by Google and used to improve Google's products. Do not upload documents you are not comfortable being handled on those terms.

We also use Render for hosting and data storage. Application data is stored in the United States.

Why we process it

To provide the service you signed up for: reading your documents, storing the extracted results in your account, letting you export them, and enforcing your plan's monthly limits. We do not sell your data, and we do not use your documents for advertising.

Retention and deletion

Extracted records stay in your account until you delete them or ask us to close your account. Email arorarijak06@gmail.com to request deletion of your account and its data, and we will action it and confirm.

Security

Traffic is encrypted in transit (HTTPS). Passwords are hashed with bcrypt. Access to your documents and extracted data is scoped to your account.

No service is perfectly secure, and we would rather say so plainly than imply otherwise. If you become aware of a security problem with Ledgerlift, please tell us at arorarijak06@gmail.com.

Where this service is offered

Ledgerlift is currently offered to customers in the United States only. We are not yet set up for the additional obligations that apply to customers in the UK and EU, and we would rather not take your money than take it while unable to meet them properly.

Your choices

You can access your extracted data at any time in the app, export it as CSV, and request deletion of your account and data by emailing us.

Changes

If this policy changes materially we will update this page and the date above.