Privacy Policy
A plain-language summary of what we collect and why.
What we collect
- Your account — your email address and a securely hashed password.
- Your business data — the transactions, customers, invoices, products, and settings you enter.
- Basic technical data — logs and simple analytics needed to run and secure the service.
How we use it
To provide the service, sign you in, send necessary email (verification, password reset, and — if you turn them on — invoice and payment messages), keep things secure, and meet legal obligations. We don't sell your data.
Who we share it with
Only the providers needed to run Smalledger — for example hosting, an email provider, and (if you enable payments) Stripe. They handle data on our behalf, or in Stripe's case under its own policy. We share only what's necessary.
Keeping it separate and safe
Each account's data is private to that account. We use reasonable safeguards, including encrypted connections and hashed passwords. No system is perfectly secure, so we can't promise absolute security — please keep your own copies of important records.
Retention and your choices
We keep your data while your account is active. During any preview period, data may be reset periodically (you're told this at signup). You can update your details or delete your account, which removes your associated data, subject to anything the law requires us to keep. Depending on where you live you may have further rights over your data — contact us to use them.
Changes
If we update this policy meaningfully, we'll update the version above.