Privacy Policy

Last updated August 2026

LedgerMedic ("LedgerMedic," "we," "us") provides software that connects to your QuickBooks Online company to identify and help correct Undeposited Funds and Unapplied Cash Payment Income issues. This policy explains what we collect, why, and how you can control it.

What we collect

• Account information you provide directly: your email address and company name.
• QuickBooks data you authorize us to read via Intuit's OAuth connection: customers, payments, sales receipts, deposits, invoices, journal entries, and chart of accounts, limited to what's needed to detect and explain issues.
• QuickBooks connection tokens, which are encrypted at rest and used only to make authorized API calls on your behalf.
• Usage and audit data: a record of scans run and fixes you approve, so you and your accountant have a history of what changed.
• Billing information, if you subscribe to a paid plan: handled entirely by our payment processor, Stripe. We never see or store your card number ourselves. See "Payment processing" below.
• Website and product analytics, on both this marketing site (ledgermedic.com) and the application (app.ledgermedic.com): aggregated visit data via Google Analytics, and usage/session analytics via Microsoft Clarity. See "Cookies & analytics" below.

What we don't do

• We never sell your data.
• We never write to your QuickBooks company without your explicit approval, except for fixes you've deliberately enabled under One-Click mode with a confidence threshold you set.
• We never use a journal entry to mask an issue. The only journal-entry write LedgerMedic ever performs is reversing a previously flagged bad fix, and only with your approval.

How we use QuickBooks data

QuickBooks data is used solely to scan for Undeposited Funds and Unapplied Cash Payment Income issues, to explain the root cause of each one, and to preview and execute fixes you approve. We do not use it for advertising, and we do not share it with third parties except the infrastructure providers (hosting and database) that operate LedgerMedic itself, under standard confidentiality obligations.

Cookies & analytics

The marketing site (ledgermedic.com) uses Google Analytics to understand aggregate traffic: which pages get visited, roughly how many people, and where from. This sets cookies in your browser and is standard third-party web analytics; Google's own privacy practices for this data are described at policies.google.com/privacy.

Both the marketing site and the application (app.ledgermedic.com) also use Microsoft Clarity to understand product usage: things like which pages and features get used, click and scroll behavior, and session recordings that help us diagnose bugs and confusing flows. Screens in the application that can display QuickBooks financial details, including customer names, transaction amounts, invoice and deposit data, are masked from Clarity's recordings, so that information is never captured by this tool. Clarity's own privacy practices are described at learn.microsoft.com/en-us/clarity/faq.

Neither tool is used for advertising or cross-site ad targeting. You can opt out of Google Analytics tracking using a browser extension such as Google's own Analytics Opt-out Browser Add-on, or by using your browser's tracking-protection settings, which will also typically block Clarity.

Payment processing

Paid plan subscriptions are billed through Stripe, a PCI-compliant payment processor. Your card details are sent directly to Stripe and never pass through or get stored on LedgerMedic's own servers. Stripe's use of your information is governed by its own privacy policy at stripe.com/privacy.

Data retention and deletion

If you disconnect QuickBooks, we stop syncing new data immediately and your access tokens are revoked. You can permanently delete your account and all associated data yourself at any time from Settings in the app, or by contacting us at hello@ledgermedic.com.

Your rights

Regardless of where you're located, you can ask us at any time to: tell you what data we hold about you, correct anything inaccurate, export a copy of it, or delete it entirely. Email hello@ledgermedic.com and we'll act on it. We do not sell personal information, so there's nothing to opt out of on that front.

Security

QuickBooks access tokens are encrypted at rest. Connections to LedgerMedic and to Intuit's API are made over HTTPS. Access to your data within LedgerMedic is scoped to your account.

Hosting & sub-processors

LedgerMedic's application and database are hosted on Render, in the United States. The services that process data on our behalf are: Render (hosting/database), Google Analytics (aggregate website analytics), Microsoft Clarity (product usage analytics and session recording), and Stripe (payment processing for paid plans). None of them are permitted to use your data for their own purposes.

Changes to this policy

We'll update the date at the top of this page when this policy changes, and for material changes we'll notify account holders by email.

Contact

Questions about this policy: hello@ledgermedic.com.