Privacy Policy

This Privacy Policy explains how LedgerProof LLC ("LedgerProof", "we", "us" or "our") collects, uses, discloses and safeguards your information when you use our website, web application and mobile applications (collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the practices described here.

1. Introduction

LedgerProof is a portfolio tracking and analytics tool for crypto-asset investors. We are designed around a simple principle: we read your data to help you understand it, but we never take custody of your funds and we collect only what we need to provide the Service.

We are not a wallet, exchange, broker, or custodian. We cannot move, trade, or withdraw your crypto assets, and we never request the permissions required to do so.

2. Information we collect

2.1 Information you provide

• Account information — your email address, display name and password (stored only as a salted hash).
• Manual entries — transactions, holdings, notes and tags you choose to add.
• Support communications — messages you send us and their contents.

2.2 Information from connected accounts

• Read-only exchange data — when you connect an exchange via API, we import balances, trade history, deposits and withdrawals on a read-only basis.
• Public wallet addresses — if you add a blockchain address, we read its public on-chain activity.

2.3 Information collected automatically

• Device & usage data — IP address, browser type, device identifiers, pages viewed and feature usage.
• Cookies & similar technologies — see Section 5.

3. How we use information

We use the information we collect to:

• Provide, operate and maintain the Service, including syncing balances and calculating profit and loss;
• Authenticate you and secure your account;
• Send price alerts, service notifications and, where you have opted in, product updates;
• Generate the reports and exports you request;
• Diagnose technical problems, prevent fraud and abuse, and improve performance;
• Comply with legal obligations.

We do not sell your personal information, and we do not use your portfolio data for advertising.

4. Exchange API keys

API keys are among the most sensitive data we handle, and we treat them accordingly:

• We request read-only permissions only. We will never ask for trade or withdrawal permissions, and we recommend you restrict your keys accordingly when creating them.
• Keys are encrypted at rest using AES-256 and in transit using TLS 1.3, and are stored separately from other account data.
• You may revoke a connected key at any time from within the Service, or from your exchange account, which immediately stops further syncing.

5. Cookies & tracking technologies

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how the Service is used. We distinguish between:

• Strictly necessary cookies — required for authentication and security; these cannot be disabled.
• Analytics cookies — privacy-respecting, aggregated usage measurement that helps us improve the product.

You can control non-essential cookies through your browser settings or our in-app cookie preferences. Disabling certain cookies may affect functionality.

6. How we share information

We share information only in the limited circumstances below:

• Service providers — vetted vendors (e.g. cloud hosting, market-data and email providers) who process data on our behalf under strict contractual obligations.
• Legal & safety — where required by law, regulation, legal process or to protect the rights, property and safety of our users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

We never sell or rent your personal information to third parties.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it to comply with legal obligations, resolve disputes or enforce our agreements.

8. Data security

We implement industry-standard technical and organizational measures to protect your information, including AES-256 encryption at rest, TLS 1.3 in transit, optional two-factor authentication, role-based access controls and regular security reviews. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

9. Your privacy rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data ("right to be forgotten");
• Export your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent at any time.

Residents of the EU/EEA and UK have these rights under the GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any right, contact us at info@ledgerproof.loan.

10. International data transfers

We operate globally and may process your information in countries other than your own. Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your information remains protected.

11. Children's privacy

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here with an updated "Last updated" date and, for material changes, notify you by email or in-app notice. Your continued use of the Service after changes take effect constitutes acceptance.

13. Contact us

If you have questions about this Privacy Policy or our data practices, contact our Data Protection Officer:

• Email: info@ledgerproof.loan
• LedgerProof LLC, Data Protection Office