Privacy Policy

Last updated 18 August 2026 · LedgerBuddy is operated by JR Digital Services (Adelaide, Australia) ("we", "us"). This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

• Bookkeeper account details — name, email, mobile, practice details, login credentials.
• Client contact details — name, mobile, email and timezone of a bookkeeping practice's clients, supplied to us by that practice for the purpose of receipt reminders.
• Xero data — with the practice's authorisation via Xero's consent screen, we read bank transaction records (date, payee, amount, receipt-attachment status) and attach uploaded receipts to transactions. We request only the minimum Xero permissions required and never receive Xero passwords.
• Receipt images uploaded through our secure links.
• Communication records — messages sent, delivery outcomes, call recordings and transcripts (calls are disclosed as recorded at the start of every call), and an audit trail of reminder activity.

Why we collect it

Solely to provide the service: identifying transactions missing receipts, sending reminders on the instructions of the responsible bookkeeping practice, collecting and filing receipts, metering usage, and meeting record-keeping obligations. We do not sell personal information or use it for third-party marketing.

Automated communications and AI

Reminder scheduling is automated, and some phone reminders are made by an AI voice assistant. Every AI call identifies itself as automated in its first sentence and states that the call is recorded. The assistant cannot give tax or financial advice; substantive questions are referred to the responsible bookkeeper. You can opt out of automated contact at any time (reply STOP to any SMS, use the opt-out link, or say so on a call) and opt-outs take effect immediately.

Who we share it with

Service providers who help us operate: Cloudflare (hosting and storage), Xero (accounting data, under your practice's authorisation), our communications platform (SMS, email and voice delivery), and — when billing launches — Stripe (payments). Some providers process data in the United States and other countries; we take reasonable steps consistent with APP 8 to ensure overseas recipients handle personal information in line with the APPs. We do not otherwise disclose personal information unless required by law.

Security and retention

Data is encrypted in transit; access tokens and credentials are stored server-side and never exposed to browsers. Receipt images and audit records are retained while the practice's account is active and as required for tax substantiation record-keeping, then deleted on request or account closure subject to legal obligations.

Access, correction and complaints

You may request access to or correction of your personal information, or make a privacy complaint, by emailing admin@bookkeeperbuddy.com.au. We will respond within 30 days. If you are unsatisfied with our response you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

If you are a client of a bookkeeping practice that uses LedgerBuddy, your practice is responsible for the instruction to contact you; contact them or us with any questions.