Privacy Policy
Last updated 29 July 2026
LedgerOS holds your business receipts and tax records. This page says plainly what we collect, where it lives, who can see it, and how to get it back or delete it.
Who we are
LedgerOS is operated by NextWave Technologies, an Australian business. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Contact for privacy questions and complaints: LedgerOs@outlook.com.au
What we collect
- Account details — your email address, and a password stored only as a cryptographic hash. We never see your password.
- Business details — the business name and ABN you enter.
- Receipt records — merchant, date, total, GST, category, and the text read from the photo.
- Receipt images — on the Pro plan only. See below.
- Bank transaction data — only from a CSV you choose to import. We have no bank feed and cannot connect to your bank.
We do not collect location data, contacts, browsing history, or anything from your device beyond the photo you deliberately choose.
Receipt images, and the difference between plans
On the free plan receipt images are not stored. The photo is processed to read the figures and is then discarded. Keep the receipt or the photo in your camera roll — the ATO asks for the actual receipt for anything over $82.50, and records must be kept five years.
On Pro, images are stored in a private bucket, accessible only to your account, and served over links that expire after an hour.
Where your data lives
Records are stored with Supabase, on infrastructure in the Asia-Pacific (Sydney) region. Data is encrypted in transit and at rest. Payments are processed by Stripe, which may involve overseas transfer under its own privacy terms — we never see or store your card details.
What we never do
- We do not sell your data. Not to anyone, at any price.
- We do not use your receipts to train machine-learning models.
- We do not share your records with the ATO or any other agency unless legally compelled.
- We do not run advertising or advertising trackers.
Analytics
We count how the product is used — pages viewed, features reached, whether sign-up completed — so we can tell what is broken. These counts carry no receipt contents, no merchants, no amounts and no personal information. We do not use advertising trackers or cross-site cookies.
Getting your data out
Export everything as CSV from Settings at any time. No export fee and no notice period. It is your record of your business, and holding it hostage would be a poor way to keep customers.
Deleting your data
Delete your account from Settings and we remove your receipts, transactions, tasks, businesses and login. This is immediate and cannot be undone — export first if you may need the records.
If a subscription lapses, stored receipt images are kept for 90 days in case you return, then deleted. Your receipt details remain and stay exportable.
Backups are retained for a short period for disaster recovery and are overwritten on a rolling basis.
Your rights
You may ask what we hold about you, ask us to correct it, or ask us to delete it. Email LedgerOs@outlook.com.au and we will respond within 30 days. If you are unhappy with our response you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy in a way that materially affects you, we will email you before it takes effect rather than quietly changing the date at the top.