Privacy Policy

Ledger Pilot (“we”, “us”) operates ledgerpilot.com.au, a service that converts PDF bank statements into spreadsheet and accounting-software formats. The data controller is the operator of ledgerpilot.com.au, ABN 54 299 326 744. Contact: support@ledgerpilot.com.au.

• Account data — your email address and authentication details when you sign up.
• Uploaded statements— the PDF you upload is processed to extract transactions. See “How long we keep it” below.
• Usage data — the number of pages you convert each month, to enforce plan limits.
• Payment data — handled by Stripe. We never see or store your full card number.
• Analytics — privacy-friendly, cookie-less usage statistics (via Cloudflare Web Analytics). No cross-site tracking.

Your uploaded PDF is encrypted, used only to extract your transactions, and automatically deleted within 24 hours of conversion. We do not retain the contents of your statements (transaction descriptions, amounts) after the conversion completes — we keep only your account record and monthly page-usage count.

We protect your information with encryption in transit (TLS) and at rest, access controls, and database row-level security so each account can only access its own data. The extraction service only accepts requests from our own backend. See our Security page for more detail. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

We rely on these providers to run the service:

• Supabase— database & authentication
• Stripe— subscription billing & payments
• Vercel — frontend hosting
• Fly.io — extraction service hosting
• Resend — transactional email
• Cloudflare — privacy-friendly, cookieless analytics

Some providers may store or process data outside Australia (including in the United States). Where they do, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles. We do not sell your personal information.

Under the Australian Privacy Act 1988 (and the Australian Privacy Principles) you may request access to, correction of, or deletion of your personal information. Email support@ledgerpilot.com.au. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under the Privacy Act 1988.

We send service and account emails that are necessary to run the service (for example, security, billing, and conversion-related messages). We will only send you promotional email with your consent, and you can opt out at any time using the unsubscribe link or by emailing support@ledgerpilot.com.au.

The service is intended for users aged 18 and over. We do not knowingly collect personal information from children.

We use only essential cookies required to keep you signed in. Our analytics are cookie-less.

We may update this policy; the “Last updated” date above reflects the current version. Material changes will be notified by email or in-app.