Privacy Policy

• Account information: your name, email address and login details, and the companies and roles you belong to.
• Your business records: everything you enter or import, including transactions, accounts, customers, vendors, invoices, bills, payments, documents and receipts you upload, and the settings for each company.
• Information from services you connect: if you connect a bank through Plaid, we receive account names, balances and transactions (never your bank password). If you take payments through Stripe, we receive the status and amounts of those payments (never full card numbers).
• Billing information: your plan, invoices and payment status. Card details are held by Stripe, not by us.
• Technical information: basic logs such as IP address, browser type and the time of requests. We use these to keep the service secure and working, and to investigate problems.

• To run the service: storing your books, producing your reports, sending the invoices and emails you ask us to send, and syncing the accounts you connect.
• To keep it secure: preventing fraud and abuse, keeping the audit trail, and investigating problems.
• To bill you for your subscription and to contact you about your account, including service and security notices.
• To support you when you ask for help.

We do not sell your personal information or your business data. We do not use it for advertising. We do not let other companies use it for their own purposes.

We use a small number of trusted providers. Each receives only what it needs to do its job, under contracts that require it to protect the data:

• Supabase (database, file storage and sign-in), hosted on Amazon Web Services in the United States
• Vercel (application hosting)
• Stripe (subscription billing, and payments your customers make on your invoices)
• Plaid (bank and credit-card connections, only if you turn them on)
• Resend (delivering invoices, reminders and account emails)
• Anthropic (reading receipts and documents you upload so their details can be filled in for you, under terms that do not allow your data to be used to train their models)
• Cloudflare (domain name services)

We may also disclose information if the law requires it, to protect the rights and safety of our users or of the service, or as part of a merger or sale of the business. In a merger or sale, this policy would continue to protect your data.

We use only the cookies needed to keep you signed in and to keep your session secure. We do not use advertising or cross-site tracking cookies.

We keep your data while your account is active. After a subscription ends, we keep the company’s data for 90 days so you can return or export it. After that we delete it. You can also delete a company yourself at any time from Settings. Deleted data leaves our database host’s backups within 7 days and our separate encrypted offsite backups within 90 days, as those backups expire. We may keep limited records for longer where the law requires it, such as our own billing records.

• You can view and update your name in your profile, and owners and admins can manage who has access to each company.
• You can export your reports at any time, and ask us for a full export of a company’s records.
• You can ask us to correct or delete your personal information, or ask what we hold about you, by emailing support@irrational-optimism.com. We will respond within 30 days. Depending on where you live, you may have additional rights under local law, and we will honor them.

We protect your data with database-level separation between companies, encryption in transit and at rest, an audit trail that cannot be edited, and automatic backups. See our Security page for details.

IO Ledger is a business tool and isn’t meant for anyone under 18. We don’t knowingly collect information from children.

If we make a material change to this policy, we will email account owners before it takes effect.

Irrational Optimism LLC · support@irrational-optimism.com