This is the Ledgr privacy notice. It describes what information we collect when you use the Ledgr platform, how we use it, and the controls you have over it. We have written it in plain English on purpose.
Ledgr stores the credential-related information you put into the platform: provider names, NPI numbers, license numbers, certification details, malpractice policy data, and case-related metadata if you choose to track it. We do not collect patient health records and Ledgr is not an EMR.
When you sign up, we collect the email address and password you provide. We also collect basic usage telemetry — pages visited, actions taken — to operate and improve the service.
We do not sell your data. We do not show advertisements. We do not share your data with third parties except the service providers required to operate the platform (Supabase, Cloudflare, Stripe, Resend) under data processing agreements.
The Ledgr infrastructure is HIPAA-ready. Our underlying service providers (Supabase, Cloudflare) offer Business Associate Agreements on the plans we operate. Practices that require a BAA with Ledgr directly can request one at [email protected].
Ledgr stores its primary database in US-East. Document uploads are stored in Cloudflare R2 in US regions. We retain your data for as long as your account is active. On cancellation, your data remains accessible to you for 90 days, then is deleted on request.
Data is encrypted in transit and at rest. Access between practices is isolated at the database level using row-level security. Sessions are cookie-based with HttpOnly and Secure flags. We are not currently SOC 2 certified and we will not claim to be until we are.
We may update this notice as the platform changes. When we do, we will update the effective date above. Material changes will also be emailed to active accounts.
Questions? Email [email protected].