LedgerBazaarWho is responsible
LedgerBazaar is responsible for the personal data described in this policy. Questions about it and requests about personal data go to support@ledgerbazaar.com.
What is collected
- Account: name, email address and password. The password is stored only in a protected (hashed) form that cannot be read back.
- Profile: profile name and type, country, language and currency, and, if given, a phone number and an address.
- Records entered in the app: purchases, shops (with a phone number and an area if given), payments, general expenses (such as rent and bills, with their categories and monthly expenses), events, and the units, categories and items in use.
- Subscription: the chosen period, the amount, and for a payment its transaction reference, how it was sent (bKash or a bank transfer) and, if given, the bKash number or bank account it was sent from.
- Technical: login sessions, and server logs of requests and errors.
Why it is used
- To run the app: keep the records, show the dues and reports, and keep the account signed in.
- To check payments for the subscription.
- To send account emails: codes to verify an email address or reset a password, a notice when the email address changes, and a note when a payment was approved or could not be verified.
- To answer support requests and to keep the service safe.
Who it is shared with
Personal data is not sold and is not used for advertising. It is shared only with the services needed to run LedgerBazaar: the hosting provider, which stores the data, and an email delivery service, which sends the account emails. It is also given to authorities when the law requires it.
How long it is kept
Data is kept while the account exists. When the account is deleted, its data is erased. Backups are kept for at most 30 days and then overwritten. Server logs are kept for 90 days; they hold no IP addresses, passwords or codes.
How it is protected
The connection to the app is encrypted, passwords are stored hashed, and each account can reach only its own data.
LedgerBazaar's support staff can see an account's records, only to answer a support request or to keep the service working. Looking at one account's records is recorded in the server logs.
Rights
A copy of the data, a correction or the deletion of the account can be asked for by writing to support@ledgerbazaar.com from the email address of the account. The identity is confirmed first. A request is normally handled within one month.
Cookies and storage on the device
Only necessary cookies are used: to keep the login, to protect against forged requests, and to remember the language. There are no advertising or tracking cookies.
The browser also keeps two small settings: the last filters or order of the shop list, the spending list and the report item list, for the open tab only; and the day the subscription reminder was hidden. Neither holds personal data.
Age
LedgerBazaar is meant for people aged 18 or older and for businesses.
Changes
When this policy changes, the new version is published on this page with a new date. Important changes are also announced in the app or by email.
Contact
LedgerBazaar, support@ledgerbazaar.com