Your information in LedgerDesks.

Information the service handles

• Account information: names, username or email, phone number, company membership, roles, profile details, authentication and session information. Passwords are stored as hashes.
• Customer and company records: contact names, email addresses, phone numbers, billing and delivery addresses, products, stock locations, prices, invoices, payment records, balances and other business financial records you enter or are authorized to access.
• Delivery information: assigned driver and truck, quantities, dates, recipient name, notes and optional drawn signature, order/drop-off times and manually entered mileage. LD Mobile does not track device GPS location.
• Files and communications: documents, images, invoice PDFs, email recipients, subjects, message content and attachments when you use those features.
• Security and service information: user-attributed business/security audit actions, session activity, request and error details. Connection information such as an IP address is processed to deliver the service and protect sign-in.

Account creation in the full workspace asks for a first and last name, email address, phone number and password. Optional delivery details and files are supplied when you choose to use those features.

How information is used

Information supports account and company access, customer service, deliveries, stock and accounting workflows, requested communications, troubleshooting and security. Company records are available to other company users according to their assigned permissions. LD Mobile does not include advertising or cross-app tracking SDKs.

Service providers and features you choose

The hosted service uses infrastructure providers to run the application, store company records and maintain backups. Configured email delivery uses Resend to process the recipients, message content and attachments you ask the service to send.

The full workspace also offers company-configured integrations, including Stripe payment links, Plaid bank connections and Gusto payroll. Relevant information is exchanged with a provider when its feature is configured and used; installing LD Mobile does not connect those services automatically. Links you choose for directions or email open the corresponding separate service.

The mobile collection workflow records cash/check details or an external credit/debit terminal reference. It does not collect card numbers or charge a card. Separate payment-provider features have their own data handling and privacy notices.

Connections and device storage

Use the hosted service over HTTPS. Account access and permissions protect private company records. LD Mobile's production Android profile requires a connection to save business records. Unsubmitted working drafts last only for the current app session; save invoices, deliveries and clock details to LedgerDesks before closing the app. Signing out clears the native session.

The browser tablet interface can store encrypted reference information and unfinished drafts on your device. Those browser records expire 12 hours after being saved; the key is scoped to your signed-in company session. Signing out or switching company removes access to that cached field work. Save unfinished work to the server first.

Reconnecting does not automatically post deliveries or payments. The Android app may temporarily cache invoice PDFs for viewing or sharing. Downloaded PDFs, exports and files you share remain under your control in their chosen destination.

Retention and account deletion

Account, company and operational information is retained while needed to provide the service, protect accounts and meet the company's accounting, audit and other legal obligations. Retention varies by record type, company obligations and applicable requirements; there is no single retention period for every company record.

You can request deletion of your LedgerDesks account and associated personal information. A request is reviewed and identity is verified before completion. Eligible personal login/profile information and authentication credentials are deleted or anonymized, and active access is revoked. Closing or disabling access alone is not treated as account deletion.

Company invoices, payment applications, journals, stock movements and necessary audit history may need to remain to preserve shared business records or meet legitimate obligations. We explain any retained information and the reason when handling your request. Backups and service-provider copies are considered during the review; where immediate removal is not possible, retained copies remain subject to the applicable retention and access restrictions. Do not send passwords, authentication codes or customer financial documents with a request.

Questions and corrections

Company administrators manage company membership and permissions. Contact theledgerdesks@gmail.com for privacy questions, corrections or deletion requests, including if you cannot sign in. We may request the minimum additional information needed to verify that the request belongs to you and identify the affected records.