Privacy
Your books are yours.
What LedgerDesk keeps on your PC, what it sends over the internet and when, and how to ask us about it. Last updated 7 November 2026.
The short version
- Your books (customers, suppliers, bills, stock, amounts) are stored on your own PC.
- We cannot see your books unless they are sent to your LedgerDesk account (cloud backup).
- The app goes online to look for updates, to check a licence key once you have entered one, and to reach LedgerDesk's server for your account.
- You sign in with Google to use LedgerDesk, on your PC and on your phone. We keep your Google account's ID, name and email address, and a list of the devices you use, to run your account and to know who our customers are. Not your profile picture, and no access to your Gmail, Drive or contacts.
- This website has no cookies, no analytics and no trackers.
What stays on your PC
Everything you enter into LedgerDesk is saved in a file on your computer, in your Windows user folder (%APPDATA%\LedgerDesk), or in another folder you choose. That includes your company profile, customers and suppliers with their GSTINs, addresses and phone numbers, bills, payments, stock, and the daily backups the app makes. Purchase-bill attachments, your logo and your signature image are files on your PC too.
You are in charge of this data and of the details of your customers and suppliers in it.
What leaves your PC, and when
1. Update check
When LedgerDesk starts, unless you turn this off in Settings, it asks GitHub (api.github.com) whether a newer version exists, and downloads it from GitHub if you choose to update. GitHub sees your IP address and the app's version number. No data from your books is sent.
2. Licence check
During the free trial the app does not contact our licence service. When you enter a licence key, and after that each time the app starts, it sends the key and a Machine ID to a Google Apps Script web app that we run. The Machine ID is a short code worked out on your PC from its name and network adapter; the name itself is not sent. Google hosts this service and sees your IP address. No data from your books is sent.
3. Cloud backup (your books in your account)
Once your PC is signed in, the app sends a copy of your whole books file over an encrypted HTTPS connection to LedgerDesk's server in India (Oracle Cloud, Mumbai). This copy contains everything inside your books, including your customers' and suppliers' details. It does not include purchase-bill attachments, your logo or your signature image. Your shop is named on the server after the company name in your Settings. When your shop's PCs share one set of books (two-way sync), each change you make is also sent to the server, which keeps the shop's shared books, so your other devices receive it.
- How long we keep copies: every copy from the last 48 hours, then one copy per day for 30 days. The newest copy is always kept.
- How your PC is recognised: by a random key stored on your PC. The server stores only a one-way hash of it, not the key itself.
- What the server logs: the time, the request, the result, the size, your shop and device numbers, and your IP address. Never the key and never anything from inside your books.
- Who can read the copies: the copies are compressed but not encrypted on the server, so whoever runs the server can read them. Only we run it, and we use the copies only to keep your backup and, if you ask, to give your books back to you.
- Stopping it: signing out on the PC (Settings, then LedgerDesk Account, then Sign Out) stops new copies. Copies already sent stay on the server until they age out or you ask us to delete them.
4. LedgerDesk account (Sign in with Google, required)
LedgerDesk accounts use Sign in with Google, and you sign in once on each PC and phone before using the app. The first sign-in needs the internet; after that a PC that has signed in opens your books without it. If our server cannot be reached and your PC or phone already has books, you can open them and sign in later.
From your Google account LedgerDesk keeps three things: its ID (a number Google gives each account), its email address and the name on it. Google's sign-in screen may say it shares your profile picture too; we do not keep it. We get no access to your Gmail, Google Drive, contacts or anything else in your Google account. We use these to link your PC and your phone to your shop, so that the phone can show your PC's books, and to know who uses LedgerDesk, so that we can support our customers.
- Your devices: for each PC or phone signed in to your account we keep its name (your PC's name, or your phone's model), whether it is a PC or a phone, the LedgerDesk version it runs, when it first and last reached our server, and, for a PC with a licence, its licence key. We keep a list of our users (email, name, shop name and these device details) on our server and in a private Google Sheet that only we can open. We do not sell or share this list.
- A key for each device: each PC or phone you sign in on gets its own random key. On the phone it is kept in Android's secure storage and is left out of the phone's backups.
- Signing out: signing out on a PC or phone revokes that device's key on our server, so it stops working. Your other devices stay signed in. If the device is offline when you sign out, it deletes the key from itself all the same; message us and we will revoke it on the server.
5. AI bill scan (next update, off unless you choose a provider)
If you choose an AI provider for bill scanning, the bill photo or PDF you pick is sent to that provider with your own API key, under that provider's terms. If you choose Ollama, the bill is read on your own PC and not sent anywhere. We do not receive the bill.
6. Sharing a bill
When you share a bill on WhatsApp or by e-mail, LedgerDesk hands the PDF to that app. What happens next is between you, that app and the person you send it to. We do not receive a copy.
This website
This website sets no cookies and uses no analytics, ads or third-party scripts. Our hosting provider keeps normal server logs, which include IP addresses, to run and protect the site. Our WhatsApp links open WhatsApp, which is run by Meta under its own privacy policy. Downloads come from GitHub.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us to:
- tell you what personal data about you we hold and how we use it;
- correct or update it;
- delete it, including cloud backup copies of your books;
- answer a complaint (grievance) about how we handle it.
For data that stays on your PC, you can view, change or delete it yourself in the app. To ask us anything, message us on WhatsApp at +91 98914 40856. We will reply as soon as we can.
Changes
If we change this policy, we will update this page and the date at the top. If a change affects what the app sends, we will say so in the app's update notes.