Privacy policy

What we collect

We collect the details needed to set up and secure your account, including your name, contact details, business details and login activity. People authorised to use a Ledra account may add information about customers, suppliers, employees and advisers. This can include invoices, bank transactions, payroll and tax records.

We also keep support messages and records of service activity. For bank feeds, Super and STP, we handle the information needed for the service you choose. We may check public business registers and websites to verify a company or find its public business contact details.

Where information comes from

Information can come from you, another authorised person in your business, an employer who uses Ledra, or a service you connect. A bank feed provides account and transaction data only after the account holder completes the relevant consent process. We also use public business sources where appropriate.

How we use information

We use information to run accounting and payroll services, manage subscriptions, protect accounts, answer support requests and meet legal and reporting obligations. Service records help us investigate errors and prevent duplicate processing.

If we contact you about Ledra products or offers, you can opt out. A public business listing does not, by itself, establish permission to send marketing messages. We do not use bank, payroll or accounting records to target advertising.

Who receives information

People you authorise can see information within the access you give them. We also share information with providers that help deliver Ledra, such as hosting, email, support and subscription payment services. If you use the relevant feature, this can include Fiskil for bank feeds, OZEDI for SuperStream, and the ATO for tax and payroll reporting.

When you choose a bank feed, its connection process presents the applicable data access and consent details. Connecting a bank account does not authorise advertising use of its data.

Website analytics and advertising

We count visits to public pages and clicks on selected links in daily totals. These totals use a page category and a broad source such as Google, Facebook or Direct / Unknown. They do not use tracking cookies or visitor identifiers, and are not linked to your account or registration. We do not put full referring URLs, URL query strings, IP addresses or browser details in these totals.

This counting respects Do Not Track, Global Privacy Control and any earlier choice to decline Ledra analytics in the same browser. If we introduce analytics that identifies a browser or links activity to an account, we will ask for your choice first.

If we introduce Meta Pixel for advertising measurement, we will ask for a separate choice before loading it. With your permission, Meta may receive visits to public pages and a completed account registration event, together with the page URL, browser, device and network information. We will not add passwords, bank records, invoices or payroll details to those events. Turning off optional tracking stops new events from your browser; Meta handles information it has already received under its own privacy terms.

Storage and security

Ledra's core application is hosted in Australia. We use access controls and additional verification for sensitive actions. We keep records for as long as needed to provide the service and meet applicable accounting, tax, security and legal requirements. When information is no longer needed, we delete or de-identify it, subject to those requirements and backup cycles.

Overseas processing

Some providers may access or process personal information outside Australia. This includes Meta if you choose its optional advertising measurement. The countries involved depend on the providers used for a particular service. Email support@ledra.au if you need details about the providers relevant to your account.

Access, corrections and complaints

To ask for access to your personal information or request a correction, email support@ledra.au. We may need to confirm your identity. If your employer supplied the information, we may work with them to handle your request.

Send privacy concerns or complaints to the same address. We will review and respond to them. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner.