CanLedger Legal Centre

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25 (An Act to modernize legislative provisions as regards the protection of personal information). We collect only what is necessary to provide the service and obtain your consent for its collection, use, and disclosure.

Account details (name, email, role), organization and financial records you enter, billing metadata from our payment processor (Stripe — we never store full card numbers), and technical logs (audit trail, IP, timestamps) used for security and integrity.

To operate your accounting workspace, process subscriptions, send transactional email (invoices, statements, alerts via our email provider), maintain an access audit log, and comply with legal obligations. We do not sell your personal information.

You may withdraw consent, and you have the right to access, correct, and request deletion of your personal information, subject to our legal record-keeping obligations. Under Law 25 you may also request data portability and information about automated processing. Contact our Privacy Officer at privacy@canledger.ca.

Data is protected with AES-256 encryption at rest, TLS in transit, bcrypt-hashed passwords, and role-based access control. We take reasonable steps to store and process Canadian customer data in a manner consistent with Canadian privacy expectations, and we will notify affected users and the appropriate authorities of any confidentiality incident as required by Law 25 and PIPEDA.

We retain financial records for as long as your account is active and thereafter as required by Canadian tax and corporate record-keeping laws (generally six years), after which data is securely deleted or anonymized.