BFT LedgerIt: Privacy Notice

This notice explains, in plain language, what personal data BeFinLit India receives when you use BFT LedgerIt, why we receive it, and the rights you have over it. It applies to anyone who downloads, installs or uses LedgerIt.

LedgerIt runs entirely on your own machine. Your bank statements, the databases LedgerIt creates, and the Excel reports you export never leave your PC. We do not collect, store or see any of it, and LedgerIt has no file upload of any kind.

The only personal data that reaches us is:

• Your name, email address and phone number, when you activate your licence. We send a one-time code to your email to verify it.
• A licence record and an automatic update check, which the app sends online as part of its normal operation, alongside the operational data described below.
• A device identifier read from your computer's hardware (specifically the motherboard serial number), used to link your licence to the machines it has been activated on.
• A brief "still here" signal sent automatically roughly every 30 minutes while the App is open, together with the App version. This tells us an installation is still active — it carries none of your statement data.
• Your approximate city and state, estimated once from your IP address the first time we can. We never use GPS or precise location.
• If you choose to answer the short one-time questions we show after activation: what you plan to use the App for, whether you'd like occasional product update emails, and how you heard about LedgerIt.
• Any bank statement you choose to email us for support. We use it only to fix the parsing issue you face. Before you send a statement, you may redact account numbers, balances or transactions you do not want to share; we need only the statement's layout to fix the issue.
• The contents of any support or feedback correspondence you send us.

• Your name, email and phone number, to activate and link your licence to you.
• Licence and update check, to keep LedgerIt working and up to date.
• Device identifier, to link your licence to your machines, recognise a reinstall, and — if a per-device limit is introduced for paid plans in future — to apply it fairly.
• Usage signal and App version, to know whether an installation is still active and to support you on the version you're running.
• Approximate city/state, to understand, in aggregate, where LedgerIt is used.
• Onboarding answers, to understand how people use LedgerIt and improve it, and — only if you opt in — to send you occasional product update emails.
• Emailed statements, to fix parsing problems and improve support for your bank's statement format, with your consent.

• We never sell, rent or trade your data. We use a small number of service providers to operate LedgerIt on our behalf — an IP-lookup service to estimate an approximate city/state, an email-delivery service for licence and notification emails, and an internal spreadsheet we use to keep track of subscribers and their usage of LedgerIt. These providers act only on our instructions and only for the purposes described here; we do not allow them to use your data for their own purposes. Beyond this, we do not share your data with third parties, and we disclose it only where the law or a court, law-enforcement agency or regulator requires us to.

• Licence and activation records, kept for as long as needed to operate, maintain and support your licence.
• Device list and reinstall history, kept for as long as your licence is active, so we can recognise your machines and tell a reinstall from a new install.
• Usage signal (last-seen time, active days/minutes, App version) and approximate city/state, kept for as long as your licence is active.
• Onboarding survey answers, kept for as long as your licence is active, or until you ask us to delete them.
• Support correspondence, kept for as long as we need it, which may be indefinitely.

• You may ask us, at any time, to access, correct or erase the personal data you have shared with us, or to withdraw any consent you have given. Write to us at befinlitindia@gmail.com and we will act on your request. If you opted in to product update emails, you can withdraw that consent at any time by writing to us or using the unsubscribe link in any such email.

• If you have a concern about how your data is handled, email us at befinlitindia@gmail.com. We respond to every grievance within 90 days.

• If you are not satisfied with our response, you may complain to the Data Protection Board of India (the Board) established under the Digital Personal Data Protection Act, 2023. You may also exercise your right to nominate a person to act on your behalf under that Act.