BruinLedger Privacy Policy
Effective November 4, 2026
This policy explains what information BruinLedger collects, why, who helps us handle it, and the choices you have. "BruinLedger", "we" and "us" mean BruinLedger LLC, which provides BruinLedger at bruinledger.com. Questions: support@bruinledger.com.
The short version
- Your books are your data. We use them only to run BruinLedger for you.
- We don't sell personal information, don't show ads, and don't share your data with advertisers or data brokers.
- We don't use your books or documents to train AI.
- We use a small number of service providers to run BruinLedger (listed below), each only for its job.
- You can download everything, and correct or delete your information.
What we collect
Account information. Your email address and password (stored only in scrambled form by our sign-in provider), the businesses you belong to, your role in each (owner, accountant, team member or read-only), and, if you turn it on, your two-step sign-in authenticator.
Your business's books. Everything you enter or bring into BruinLedger: transactions, accounts, invoices, estimates, bills, payments, deposits, credits, checks, purchase orders, products, projects, time, mileage, budgets, fixed assets, loans, notes on accounts, questions and answers between you and your accountant, and your customers' and vendors' names and contact details. Your business details (address, phone, email, logo, how customers can pay you) appear on the documents you send.
Tax planning figures you enter. If you use estimated taxes, the figures you enter for the plan (for example, last year's total tax and whether last year's income was above a threshold) and the payments you record. BruinLedger doesn't ask for or keep tax ID numbers.
Documents you upload or email. Bank statements, bank download files, bills, receipts and other files, and the details BruinLedger reads from them. If your business uses receipts by email, the emails sent to its BruinLedger address: who sent them, the subject, the text and the attachments. This includes files and answers sent through a request link your accountant or a business owner shares, and when they were sent.
Bank information, if you connect a bank. Through Plaid: account names, types and the last digits of account numbers, balances, and transactions. BruinLedger never sees your bank username or password, and keeps the connection key Plaid provides in an encrypted vault, readable only by BruinLedger's servers.
Payments through Stripe, if your business turns them on. Your business connects its own Stripe account. BruinLedger keeps that account's ID and whether it's ready, and for each payment: the amount, the method (card or bank), Stripe's fee and its status. Your customers' card and bank details go to Stripe, never to BruinLedger.
Records of changes. BruinLedger keeps a history of changes to the books (who changed what, and when) so you and your accountant can see it. This is part of keeping trustworthy books.
Technical information. Like most websites, our hosting and sign-in providers record technical details of requests (for example IP address, browser type, time) to keep the service running and secure. The sign-in check (hCaptcha) looks at signals from your browser to tell people from bots. When something goes wrong, BruinLedger records the error (with email addresses, tokens and long numbers taken out) so we can fix it, and deletes those records after 90 days.
Usage we measure for your plan. How many documents BruinLedger reads for your business each month and what that reading cost, so your plan's allowance works.
If you ask for early access. Your name, email address, business name and anything you tell us, so we can contact you. If we give you an invite code, we keep only a scrambled form of it and how many times it can still be used.
Your customers' information
When you send an invoice or estimate, your customer's email address receives it. Invoices, estimates and (if you use them) your customers' own pages each have a private link: anyone with the link can see that document, so share it only with the customer. BruinLedger records when a link is first opened by someone outside your business. If your customer accepts an estimate online, BruinLedger records the name they type as their signature and when they did it; if they decline, any note they leave. If your customer pays online, Stripe handles the payment details. You're responsible for having your customers' and vendors' information lawfully, and for answering their questions about it; we'll help you do that.
How we use it
- To provide BruinLedger: storing your books, showing reports, sending the invoices, estimates, reminders and invitations you ask us to send, reading the documents you upload or email, syncing your bank, and recording payments your customers make.
- To keep BruinLedger secure and working: sign-in, two-step sign-in, blocking automated sign-ups, investigating misuse, and fixing errors.
- To support you and tell you about important changes to BruinLedger or these policies.
- To meet legal obligations.
We don't use your books or documents to train AI models, and our document-reading provider doesn't either under the terms we use it on. We don't use your information for advertising.
Who helps us run BruinLedger
| Provider | What it does for BruinLedger | What it handles |
|---|---|---|
| Supabase | Database, sign-in, file storage (United States) | All of the above |
| Vercel | Hosts the BruinLedger website and runs its servers | Requests to BruinLedger |
| Plaid | Connects your bank, if you choose to | Bank information |
| Anthropic | Reads documents you upload or email to pull out the details, and suggests categories for payees BruinLedger hasn’t seen before (this can be turned off in Business settings) | The documents; for suggestions, transaction descriptions and your list of categories |
| Resend | Sends the emails BruinLedger sends (invoices, estimates, reminders, invitations, sign-in emails), and receives emails sent to your business's receipts address | Recipients' and senders' addresses, the email content and attachments |
| Stripe | Card and bank payments from your customers, into your business's own Stripe account, if you turn them on | Payment details (which BruinLedger never sees), and the payment records shared with BruinLedger |
| hCaptcha (Intuition Machines) | Tells people from bots at sign-in and sign-up | Browser signals |
Each provider may only use the information to do its job for BruinLedger. We may also share information if the law requires it, to protect people's safety or BruinLedger's rights, or as part of a merger or sale of BruinLedger (in which case this policy keeps applying). Within a business, the people its owner invites (including an accountant or a read-only person such as a lender) see its books as their role allows.
Your choices and rights
- Download: Business settings → Your data → Download everything.
- Correct: change your details and your books in BruinLedger.
- Delete: an owner closes the business in Business settings → Close this business. Its banks are disconnected straight away, and 30 days later everything in it (books, documents and files) is deleted for good; until then an owner can reopen it. You can also ask at support@bruinledger.com. Backups expire on their own schedule, within 7 days.
- Bank connections: disconnect a bank in BruinLedger at any time; you can also manage it through Plaid's portal (my.plaid.com).
- Category suggestions: turn them off in Business settings, and transaction descriptions are never sent for them.
- Emails: we only send emails about your account and BruinLedger itself. Invoice and estimate emails go to the addresses you choose.
Depending on where you live, you may have further rights (for example, to know what we hold about you). Contact us and we'll respond as the law requires.
Keeping it safe
BruinLedger is built so each business's books are visible only to the people it has invited, enforced by the database itself (read-only people can't change anything). We use encrypted connections, encrypted storage, an encrypted vault for bank connection keys, two-step sign-in, sign-in protection against bots, limits on how much email can be sent, and a history of every change to the books. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.
Cookies and similar storage
BruinLedger uses cookies only to keep you signed in, remember which business you're working in, and protect sign-in. It stores a few preferences in your browser (for example, a running timer, the journal's layout, a check printer's alignment, or that you've seen the phone install tip). We don't use advertising or tracking cookies. On a phone, BruinLedger uses the camera only when you choose to snap a receipt.
Children
BruinLedger is for businesses and isn't meant for anyone under 18.
Changes
If we change this policy in a significant way, we'll tell you by email or in BruinLedger before it takes effect.
Contact
BruinLedger LLC, 36 W. Flint St., Lake Orion, MI 48362. support@bruinledger.com