Privacy policy
Last updated: 26 October 2026
This policy explains how Revzio Pte. Ltd. (“Revzio”, “we”, “us”) collects, uses, shares and protects information when you use Ledgerra, our service for checking billing and accounting records (the “Service”), and our website at ledgerra.ai.
1. Who we are
Ledgerra is a product of Revzio Pte. Ltd., a company registered in Singapore (UEN 202534052M), 68 Circular Road, #02-01, Singapore 049422. For any privacy question or request, email ledgerra@revzio.ai.
2. Our role
- Account information, such as your name, work email and company details: we decide how this is used, so we are its controller.
- Customer data, meaning the information we access from the services you connect (Stripe, QuickBooks Online and Google Drive) and the documents you send us: we process it on behalf of the company that signed up, only to provide the Service. For this data, that company is the controller and we are its processor. Our data processing addendum is available on request.
3. Information we collect
Information you give us
Your name, work email, company name and role, and anything you write to us.
Information from Google sign-in
When you sign in with Google, we receive your name, email address and profile picture.
Information from services you connect
We access these only after someone in your company connects them, and only within the permissions they approve:
- Stripe: customers, products and prices, subscriptions, invoices, credit notes, coupons, charges, refunds, disputes, payouts, balance transactions and related reports.
- QuickBooks Online: company settings, chart of accounts, customers, vendors, items, invoices, payments, sales receipts, credit memos, deposits, bills, bill payments, journal entries and attachments.
- Google Drive: only the files you choose with Google's file picker, and files Ledgerra creates for you. We cannot see any other files in your Drive.
Documents you send us
Contracts, customer invoices and vendor bills that you upload, or email to an address we give your company.
Usage and device information
Pages visited, actions taken in the app, browser and device type, IP address and error reports. We use this to run, secure and improve the Service.
Cookies
The app uses cookies that are needed to keep you signed in and to protect your account. Our public website does not set cookies. If we add analytics cookies, we will ask for your consent where the law requires it.
4. How we use information
- To provide the Service: syncing data from your connected services, reading your documents, running checks, and showing findings with their evidence and reports.
- To keep the Service secure and working: preventing abuse, fixing errors and monitoring performance.
- To communicate with you: service emails, reports and support. You can opt out of product news at any time.
- To improve the Service: using aggregated or de-identified information about how features are used.
- To meet legal obligations and enforce our terms.
We do not sell your information, use it for advertising, or use customer data to train AI models.
If you are in the European Economic Area, the UK or Switzerland, we rely on these legal bases: performing our contract with you; our legitimate interests in securing and improving the Service; your consent, where we ask for it; and compliance with legal obligations.
5. How we use Google user data
- What we access: your basic Google profile (name, email address and picture) to sign you in, and, through the drive.file permission, only the Drive files you select with the Google Picker plus any files Ledgerra creates.
- How we use it: to sign you in; to read the documents you selected so that we can extract contract terms and invoice details and compare them with your billing and accounting records; and to save evidence files you ask us to create.
- How we store it: copies of the selected files, and the text and terms extracted from them, are kept in encrypted storage linked to your company's workspace.
- How we share it: only with the service providers that run the Service, listed in section 7. This includes our AI provider, which processes document text to extract terms and is not allowed to use it to train its models. We never sell Google user data or use it for advertising.
- Human access: our staff do not read your Google user data unless you ask us to (for example, for support), it is needed for security, or the law requires it.
- Removing access: disconnect Google Drive in Ledgerra, or remove Ledgerra from your Google Account's third-party access page. We then stop accessing your Drive.
Ledgerra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. How we use AI
We use AI models from Anthropic to read documents and to draft plain-language explanations of findings. Every contract term an AI model extracts must match the text on the page it cites, and amounts and matches are calculated by our own code, not by the model. Anthropic's commercial terms do not allow it to train its models on the data we send.
7. How we share information
We share information only as described here:
| Service provider | What it does for us | Location |
|---|---|---|
| Vercel | Website and app hosting | United States |
| Supabase | Database, sign-in and file storage | United States |
| Inngest | Background processing | United States |
| Anthropic | AI reading of documents | United States |
| Postmark | Email delivery | United States |
| Sentry | Error monitoring | United States |
| Sign-in and access to the Drive files you pick | United States |
- Connected services: during the beta, Ledgerra only reads from Stripe and QuickBooks Online. When features that make changes become available, we will send data to those services only to carry out an action someone in your company has approved.
- Company changes: if Ledgerra moves to a company in the Revzio group, or is part of a merger, acquisition or sale of assets, information may transfer under this policy. We will tell you before that happens.
- Legal reasons: where the law requires it, or to protect the rights, property or safety of our users, the public or us.
8. International transfers
Our service providers store data in the United States. When we transfer personal data from the European Economic Area, the UK or Switzerland, we use the European Commission's standard contractual clauses or another lawful transfer mechanism. Where Singapore's Personal Data Protection Act applies, we make sure data transferred overseas is protected to a comparable standard.
9. How long we keep information
- Connected services: when you disconnect a service, we stop syncing it and delete its access tokens straight away.
- Customer data: kept while your workspace is open. When you close it, we delete customer data within 30 days, and it leaves our backups within a further 90 days.
- Account information: kept while your account is open and deleted within 90 days of closing it, except records the law requires us to keep, such as invoices.
10. Security
We encrypt data in transit and at rest, and encrypt access tokens for connected services with keys specific to each company. We ask only for the permissions the Service needs: read-only access during the beta, and Drive access limited to the files you pick. Access to customer data is limited to staff who need it, and is logged. No system is perfectly secure; please report any security concern to ledgerra@revzio.ai.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To make a request, email ledgerra@revzio.ai. We will reply within 30 days. If your request is about customer data that your company controls, we will pass it to your company and help it respond.
You can also complain to your local data protection authority, or in Singapore to the Personal Data Protection Commission. If you are a California resident, you have the right to know, correct and delete the personal information we hold about you, and we will not treat you differently for using these rights. We do not sell or share personal information as those terms are defined in California law.
12. Children
Ledgerra is a business service for adults. We do not knowingly collect information from anyone under 18.
13. Changes to this policy
We will post any change here and update the date at the top. If a change is significant, we will also tell account owners by email before it takes effect.
14. Contact
Revzio Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422. Email ledgerra@revzio.ai.