Privacy Policy

1. Introduction

GLedger.ai ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect your information when you use our website (www.gledger.ai) and our accounting platform (portal.gledger.ai).

We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is GLedger.ai. For any privacy inquiries, contact us at privacy@gledger.ai.

3. Data We Collect

4. How We Use Your Data

We process your personal data to:

• Provide and maintain the GLedger platform
• Process your transactions and manage your account
• Send service-related communications
• Improve our products and services
• Comply with legal obligations
• Respond to your inquiries and support requests

Legal bases (GDPR): We process data based on contractual necessity (to deliver our service), legitimate interests (to improve our platform), consent (for analytics cookies), and legal obligations (tax/regulatory compliance).

5. Data Storage & Security

Your data is hosted on Google Cloud Platform (GCP) infrastructure with data centers in the United States. We implement enterprise-grade security measures including:

• Encryption at rest and in transit (TLS 1.3)
• Role-based access control
• Regular security audits and vulnerability assessments
• Automated backups with point-in-time recovery
• Audit logging for all data access

6. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at privacy@gledger.ai. We will respond within 30 days.

7. Cookies

We use the following types of cookies:

You can manage cookie preferences through the consent banner displayed on your first visit, or by adjusting your browser settings.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Account data is retained while your account is active and for 90 days after deletion. Financial data may be retained longer to comply with legal and regulatory requirements.

9. International Transfers

Your data may be transferred to and processed in the United States where our cloud infrastructure is located. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data during international transfers.

10. Third-Party Services

We use the following third-party services:

• Google Cloud Platform — infrastructure and data hosting
• Google Gemini AI — AI features (data processed per Google Cloud terms)
• Cloudflare — DNS, security, and bot protection (Turnstile)

11. Children's Privacy

GLedger is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. We encourage you to review this policy periodically.

13. Contact & Complaints

If you have questions about this policy or wish to exercise your rights, contact us at privacy@gledger.ai.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.