Privacy policy

Last updated 20 October 2026. Written in plain words, and true of how LedgerPost works today.

LedgerPost turns the bank statement you upload into entries for your Tally and a daily report. To do that it has to hold some of your business's data. This page says what, where, who can see it, and how to have it removed.

What we hold

Your account	Your name and e-mail address (from Google, or the e-mail you typed). Your mobile number if you give it to us for support.
Your bank statements	The PDF, Excel or CSV files you upload, and the lines read from them (date, narration, amount, balance). If a statement is password-protected, the password you type is kept so the next statement from the same bank opens without asking.
From your Tally, through the add-on	The company's name, Tally GUID, GSTIN and PAN; the Tally licence serial and edition; the names, groups and balances of your ledgers; the open bills of your debtors; and the vouchers of the bank ledger you chose. Nothing else from Tally is read: no sales, purchases, stock, payroll or other ledgers' vouchers.
What you do in LedgerPost	Which ledger you picked for a line, what you approved, edited or ignored, and what was posted to Tally with its voucher number. This is what LedgerPost learns from.
Reports	The MIS files it makes for you (text, page and Excel).
Payments	The plan, amount, and the Razorpay order and payment ids. Card, UPI and bank details go to Razorpay, never to us.

What we never ask for

• Your net-banking login. LedgerPost never connects to your bank; it reads only the statement you upload.
• Your Tally password. The add-on runs inside your own Tally, which you have already opened.
• Card numbers or bank account passwords.

Where it is kept

On Cloudflare's servers in its Asia-Pacific region (Singapore). Every company has its own database and its own folder of files; one company's data is never in another company's database. Data travels only over encrypted connections (HTTPS) and is encrypted on disk by Cloudflare's storage. Your statement files and report files are also encrypted with a key that belongs to your company alone, and that key is locked by a master key kept outside the database and the file store, so a copy of either is unreadable on its own. The lines read from your statements (dates, narrations, amounts) and your ledger names are kept in your company's database as they are, because the matching works on them; they are not encrypted with your company's key.

Who can see it

• The logins of your company. Anyone you sign in with can see that company's statements, ledgers and reports.
• The LedgerPost team, to run the service and to help you when you ask. Our rule: we do not open your statements or ledgers unless you have asked for help or something has failed. Our day-to-day screens show counts and statuses, not your lines; opening your company's own screens needs a database-level account, and every such opening is listed on your Settings page under "Your data", with who and when.
• Nobody else. We do not sell, rent or share your data. We show no advertising.
• One exception, for statements our reader cannot read. When a file's layout is one our own reader cannot map, that file is sent once to Google's Gemini service (the paid API, whose terms say the data is not used to train its models) to be read, and the reading is accepted only when every running balance in it adds up. Nothing else - no ledger, no past statement, no name of yours - goes with it, and a file our reader handles itself never leaves.

Services we run on, which process data for us and only for us: Cloudflare (hosting and storage), Google (sign-in, only if you choose it), Resend (the e-mails we send you), Razorpay (payments). When you share a report on WhatsApp or by e-mail, that goes through your own WhatsApp or mail app, not through us.

How long, and how to delete

We keep your data for as long as your account exists. The owner can remove everything at once from Settings > Your data > Delete everything: the statements, the lines read from them, the ledgers, the reports, the files, the company's key and the account itself, immediately. Invoices we issued to you are kept, as the tax law requires. Or write to us at hello@ledgerpost.in or WhatsApp +91 98304 16044 and we do it within seven working days and confirm by e-mail. Your Tally is never touched by a deletion: whatever was posted stays in Tally.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you may ask what personal data we hold about you, have it corrected or erased, and raise a grievance. Write to hello@ledgerpost.in or WhatsApp +91 98304 16044; we answer within seven working days.

Cookies

Two cookies, both needed to work: one that keeps you signed in (90 days), one that remembers which company you were on. No analytics cookies, no advertising cookies, no trackers.

Who we are

LedgerPost is made and run by Ekflow Tech LLP, Unit 103, 86 A Haute Street Corporate Park, Topsia, Kolkata 700046. LedgerPost is for businesses, not for anyone under 18. When this page changes, the date at the top changes with it.

LedgerPost is made by Ekflow Tech LLP, Unit 103, 86 A Haute Street Corporate Park, Topsia, Kolkata 700046. Questions: hello@ledgerpost.in or WhatsApp +91 98304 16044.
Tally and TallyPrime are trademarks of Tally Solutions Pvt. Ltd. LedgerPost is not made by Tally Solutions. Privacy · Terms