Privacy Policy

LedgerSync stores the minimum data needed to authenticate users, manage organizations and client workspaces, connect supported commerce channels, and prepare accounting-ready sync workflows.

OAuth credentials are stored server-side and refresh tokens are encrypted before persistence. Billing, support, webhook, queue, and operational audit records may also be retained to operate the service safely.

Customers retain ownership of their tenant data and may request export or deletion, subject to legal, tax, fraud, financial record, and operational retention requirements.

Privacy requests and questions can be directed to privacy@commercebridge.app.