Compliance

Privacy Policy & GDPR

How we protect, host, and respect your financial data.

🛡️ Our Core Privacy Principles

At Kledger, your financial privacy is not an afterthought — it is the core design principle. We build with minimal data capture and strict security parameters so you remain in absolute control of your numbers.

🇪🇺 Data Hosting Location

All backend database operations, user records, settings, and uploaded receipts are hosted entirely within the European Union (EU). Specifically, our systems reside in the Frankfurt, Germany region (AWS eu-central-1 infrastructure) through our database partner, Supabase. This guarantees that your data stays under the protection of strict European jurisdiction.

🔒 GDPR Compliance & Your Rights

We fully adhere to the EU General Data Protection Regulation (GDPR). As a Kledger user, you hold the following rights which can be exercised autonomously at any time:

  • Right to Access & Portability: You can export every single income entry, expense entry, hour log, and settings profile into a clean, standard JSON or CSV file directly from your Settings panel.
  • Right to Erasure (Right to be Forgotten): When you choose to delete your account or organization, our systems trigger an immediate, cascading delete. Your records, settings, and uploaded invoice attachments are permanently scrubbed from our live production databases and cloud storage buckets.

🍪 Cookies & Local Storage

Kledger does not run any third-party tracking networks, analytics scripts, or advertising trackers. We value your privacy too much to track your behavior across the web. We only use essential client-side storage technologies:

  • Local Storage: Used locally on your device to store interface preferences (such as your chosen dark/light visual theme and language setting).
  • Authentication Cookies: Standard, secure session tokens managed by Clerk to keep you safely logged in as you navigate your workspace.

💼 Key Infrastructure Partners

To deliver Kledger safely, we partner with industry-leading infrastructure providers that maintain top-tier compliance certifications (ISO 27001, SOC 2):

  • Supabase: Handles database storage and secure document hosting (all localized in Frankfurt, Germany).
  • Clerk: Handles secure multi-factor user authentication and session management.

Important: Your data is your property. We never sell, lease, analyze, or monetize your financial logs. Kledger is a software utility paid for by subscriptions, keeping our business model aligned entirely with your utility and privacy.