Privacy policy

Last updated: 14 August 2026.

This policy explains what personal information LedgerWatch collects, why we collect it, and how you can ask us to delete it. It is written to be consistent with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

What we collect

Account information. When you register, we collect your email address and a password. Your password is stored as a salted hash — we cannot see or recover the original password.

Xero data. When you connect a Xero organisation, we store, for each contact: the contact's name, whether it is flagged as a supplier, and its bank account details as recorded in Xero (including the combined bank account number and any batch payment account number, name, code, and reference). We also store a history of any changes we detect to those fields, so that a change can be reviewed later.

Why we collect it

We collect account information to let you log in and to control which Xero organisations you can see inside LedgerWatch. We collect and store Xero contact and bank detail data because comparing it against what we recorded previously is the entire purpose of the service — it is how we detect and alert you to changes.

Where it's stored

Your data is stored on infrastructure located in Australia, or in whichever region we host the production service in at the time — we will keep this policy updated as our hosting arrangements are finalised. We use Stripe to process subscription payments; Stripe holds your payment details directly, and we do not store your card number.

We don't sell your data

We do not sell your personal information or your Xero data, and we do not share it with third parties for their own marketing purposes. We share data only with the infrastructure providers needed to run the service (hosting, database, and email delivery) and with Stripe for payment processing, each solely for that purpose.

Requesting deletion

You can ask us to delete your account and all associated data at any time by emailing support@ledgerwatch.app from the email address on your account. We will disconnect any linked Xero organisations and delete your data within a reasonable time, and no later than 30 days from your request, except where we are required to retain records by law.

Contact

For any question about this policy or your data, contact support@ledgerwatch.app.