Privacy Policy

Effective October 18, 2026. Last updated October 18, 2026.

This describes what sjLedger actually does, not what a policy generator would have us say. Where something is uncomfortable to admit, it’s in here anyway.

The short version

We collect what you give us, what your connected banks send us, and what the app needs to run.
We don’t sell or rent your data. Period. Not your books, not your bank data, not your contact details. There is no advertising.
We share only what our partners need to deliver the service, and only to the extent they need it. Your private financial data stays private.
Bank connections are read-only and run through named bank-data providers. Card numbers never touch us.
Your books are yours. Export them, all of them, any time.
Staff access to your books is limited, shown to you, and recorded.
Your data is stored in the United States.

1. Who this covers

sjLedger is a product of Sally Jo LLC (“Sally Jo”, “we”, “us”). This policy covers sjLedger only: sjledger.com, the domains that redirect to it, and the sjLedger application.

sjLedger is sold to businesses. If you are inside someone else’s books (because you work there, or because you’re their accountant), that business decides what goes into its books and who can see them. The people and companies a business records in its books (its customers, vendors, employees and owners) are that business’s data. We handle it on the business’s behalf, and the business is responsible for having the right to put it there.

2. What we collect

Your account. Your name, email address, a one-way hash of your password, your time zone, and your two-factor settings: the authenticator secret and recovery codes (stored encrypted), any passkeys, and, if you choose texted codes, your mobile number together with when and how you agreed to texts.

When you accept our terms and this policy. The date and time, your IP address, your browser and device, and the version of each document you accepted, as evidence that you agreed.

Your books. Everything you or your people put in, or bring in, is your content. That covers the chart of accounts, customers, vendors, products and services, invoices, bills, payments, expenses, transfers, loans, mileage logs, journal entries, notes, tags, and the receipts and files you attach, plus anything imported from another accounting product. We don’t read it except when we have to: support you’ve asked for, a security or abuse investigation, or a legal obligation.

Bank and card connections. When you connect a bank or card account, the connection runs through a bank-data provider, currently Plaid or Teller. You sign in to your bank through that provider. We never see or store your bank password. What the provider sends us, and we keep, is: the institution’s name; the names, types, and last few digits of the accounts you chose to connect; balances; and transactions (date, amount, description, and the provider’s merchant and category details). The connection is read-only. Plaid’s and Teller’s own privacy policies govern what they do with your information.

A record of who did what. Every change to the books writes an audit row: who did it, what changed from what to what, and when. That history is shown on the record itself. It is kept when the record it describes is deleted or merged, because that is how books stay trustworthy.

Billing. Card payments for your sjLedger plan happen on our payment processor’s own page. The card number never touches us. We hold your plan, its billing period, where the subscription stands, the processor’s customer identifiers, and the card’s brand and last four digits so you can tell which card is on file. If you let your customers pay your invoices, those payments run through your own account with the processor. We hold the identifiers that link it to your books and the payment status of each invoice, never your customers’ card numbers.

Your sign-in sessions. The session, with the IP address and browser it came from, so you can see your active sessions and sign the others out.

The demo. Anyone can open a demo company without an account. It holds made-up data. We record that a demo was opened, and the IP address it came from (to stop abuse), and delete the demo company automatically, usually within 48 hours.

Messages you send us. What you write, and how to reach you, so a person can answer.

Ordinary logs. Request and error logs (IP address, timestamp, what was asked for, the browser string), so we can run the service, find faults and stop abuse.

3. What we don’t do

We don’t sell, rent or trade your data. Period. That covers your books, your bank data, your account details and everyone recorded in your books, to anyone, for any price.
We don’t run advertising, and nothing here goes to an advertiser or data broker.
No marketing pixels, no cross-site tracking.
We don’t use your books or bank transactions to build a profile of you, to market anything to you, or to train anyone’s AI models.

4. How we use it

To run sjLedger: keep your books, bring in bank transactions, suggest matches and categories for you to approve, send your invoices, and produce your reports.
To keep the service secure, prevent abuse and fraud, and investigate when something looks wrong.
To send the email and texts described in section 7.
To bill you for your plan.
To answer and support you when you ask.
To meet a legal obligation when one applies.

That’s the whole list.

5. What your browser loads from elsewhere

sjLedger is deliberately quiet. Outside our own servers: a network service sits in front of the site, the public site loads its typeface from a font service, public forms may use an invisible human check to stop spam, and paying takes you to the payment processor’s own checkout page. Connecting a bank opens the bank-data provider’s own window. None of these is used to track you.

We don’t sell or rent your information, period. We share it only with the partners who help us deliver sjLedger to you, and only to the extent each one needs to do that job. They may not use it for anything else. Your private financial data stays private. Those partners, and the only other people who ever see it:

Vendors who help us provide the service:
- the hosting company that runs our servers (in the United States);
- the network and storage service in front of the site that holds your attachments and our encrypted backups;
- a second cloud provider holding an off-site encrypted backup copy (United States);
- the service that delivers our email, and the one that sends our texts (only the phone number and the message);
- the payment processor;
- the bank-data providers, Plaid and Teller, who connect your bank accounts at your request.
People you let in. Your own users, and any accountant or bookkeeper you invite, see the books you give them access to. Invoices and statements you send go to the customers you send them to.
Legal and safety recipients, where the law requires it, or where it’s needed to protect someone’s rights, property or safety.
A buyer of the business, if sjLedger or Sally Jo LLC is ever sold or merged. We would tell you before your data moved.

7. Email and text messages we send you

Account email (sign-in and security, billing, a bank connection that needs attention, an export that’s ready, a notice that an account is closing) comes with having an account and can’t be switched off while it exists.

Email you send through sjLedger, such as invoices, reminders and statements, goes to your customers from sjLedger on your behalf, with your business’s name on it. Your customer can reply, and replies go to you.

Text messages. We text only people who give us a mobile number and agree to texts. We send sign-in codes, security alerts and system notices. Message and data rates may apply. Reply STOP to any text, or turn texts off in your profile, and they stop. Reply HELP for help. We never sell your number, and it’s never shared with anyone for their own marketing.

8. Cookies

Only essential cookies: one that keeps you signed in, one that stops other sites from acting as you, and a remember-me cookie if you ask for it. No advertising cookies and no third-party cookies set by us. The public site itself sets no cookies.

9. Where it lives, and how it is protected

sjLedger runs in the United States, and your books, attachments and backups are stored in the United States. The network in front of the site operates globally, so a request may pass through a server nearer to you first.

Everything is encrypted in transit, and the site is served over HTTPS only.
The disk the database sits on is encrypted, and the storage holding your attachments and backups encrypts what it holds.
Attachments are never public. Each download is authorized first and the link expires within minutes.
Bank-connection tokens are stored encrypted. We never hold your bank password.
Passwords are stored as a one-way hash. Two-factor sign-in is required for everyone.
Each business’s books are kept separate from every other business’s, and that separation is enforced by the database itself, not only by our code.
Backups run continuously and nightly, are encrypted, are copied to a second provider, and are test-restored on a schedule.

Those backups exist for our recovery, not as a promise about yours. Our Terms of Service are blunt about that. Keep your own copies: export any time. No system is perfectly secure, and we won’t pretend otherwise.

10. Who here can see it

Very few people, and never quietly.

Staff access requires two-factor sign-in and is limited to the people who run sjLedger.
Support sometimes means viewing your books as you see them. That access is time-limited, read-only unless you ask us to fix something, shown to you while it’s happening, and recorded in your business’s history: who, when, and what.

11. Keeping and deleting

Inside sjLedger, mistakes are fixable. A duplicate customer can be merged. A record entered by mistake can be deleted. The audit history of the change is kept either way.

Disconnecting a bank stops new transactions coming in and tells the provider to end the connection. Transactions already brought into your books stay there, because they are part of your records.

When a subscription lapses or is cancelled, the business’s books are generally kept, read-only and exportable, for 12 months, with two reminder emails before they are deleted. You can ask us to delete them sooner. We keep the billing records we need to answer for what was charged, and anything the law requires us to keep. Backups age out on their own schedule after that. These periods are our general practice, not a promise. Our Terms allow us to delete data at any time. Export your books before you go: the export is complete and readable by other software.

The demo deletes itself, usually within 48 hours.

12. Your rights, and how to use them

Depending on where you live, you may have rights over the personal information we hold about you: to know what we have, get a copy, correct it, have it deleted, and not be treated worse for asking. We’ll honour those requests from anyone, wherever you live.

Much of it is already in your hands: your profile, sign-in settings and sessions are yours to change, and the export gives you everything in your books. Where your information sits in someone else’s books (as their customer, vendor or employee), that business controls the record. We’ll point you to them rather than change their books on your behalf.

To make a request, use the contact form at sjledger.com/contact. We may need to confirm who you are before we act.

If your business needs a data processing agreement or answers to a security questionnaire, ask, and we’ll put it in writing.

13. Children

sjLedger is a business tool and is not for children. You must be at least 18 to hold an account. We don’t knowingly collect information from children. If we find we have, we’ll delete it.

14. Changes, and contacting us

We may update this policy. When we do, the date at the top changes, and if the change matters, we’ll ask you to accept it the next time you sign in.

Questions go through the contact form at sjledger.com/contact, or by mail to:

Sally Jo LLC (sjLedger) PO Box 2100 Valparaiso, IN 46384