How Gang Ledger stores, processes, and protects your data today.

This policy explains the current data model for gang-ledger.hedgetech.app, including personal-ledger encryption, Google Drive storage, temporary bank-statement parsing, receipts, project uploads, and AI-assisted analysis.

Last updated

June 19, 2026

This document is intended to reflect the live product behavior as implemented on June 19, 2026.

Personal ledger encryption

Your personal-finance ledger is encrypted before it is written to app-managed storage or your Google Drive app-data space.

Optional Google Drive storage

If you connect Google Drive, Gang Ledger can keep the encrypted personal-ledger file in your Drive appDataFolder.

Temporary statement handling

Bank statement files are uploaded only for parsing and are deleted after the import attempt finishes.

Shared files differ

Receipt images and some project import files do not currently use the same private-ledger storage model.

Data we collect

The information categories Gang Ledger currently processes.

Account and profile information such as your name, email address, phone number, ABN, country, preferred currency, and sign-in identifiers.
Personal-finance data such as tracked accounts, account numbers, BSB details, balances, entries, transfers, bills, assets, liabilities, exchange rates, and saved insight requests.
Collaboration data such as gangs, member roles, invitations, contribution records, savings targets, shared receipt allocations, ROSCA records, projects, milestones, approvals, and activity logs.
Support and communication data such as support tickets, replies, announcements, invite emails, notification emails, and in-app status metadata.
Uploaded content such as receipt images, statement files used for parsing, and project import files or source documents.
Technical and session data such as authentication session state, redirect paths, basic browser metadata, and limited client-side cached user context used by some flows.

Plain-language summary

The shortest accurate explanation of the current privacy model.

Personal-finance ledger data is encrypted before storage.

Connecting Google Drive moves that encrypted personal-ledger file into your Drive appDataFolder.

Gang Ledger still decrypts personal-ledger data on the server when carrying out authenticated actions.

Receipt images and some project-upload files are not yet stored under the same private model and may use public object URLs.

How we use data

Operational uses inside the product.

Create and maintain your account and profile.
Run personal-finance tracking, multi-account views, inter-account transfer detection, and net-worth style summaries.
Power group ledgers, shared receipts, targets, ROSCA workflows, and project-finance collaboration.
Send operational emails including invitations, receipt notifications, support replies, announcements, and account-related messages.
Parse statements and receipts, generate import drafts, and provide AI-assisted financial insights when you use those features.
Improve reliability, prevent abuse, investigate incidents, and support audit or reconciliation workflows inside the app.

Service providers and subprocessors

Third parties involved when certain features are used.

Google OAuth and Google Drive, when you sign in with Google or enable private-ledger storage in your Google Drive appDataFolder.
Vercel Blob or equivalent object storage for statement uploads, receipt images, and uploaded project files.
OpenAI for selected AI-assisted features such as statement and project-import fallback parsing, saved-transaction insights, and the realtime assistant.
iParse for primary document parsing across supported statement, receipt, income, and project import workflows when that integration is enabled.
Resend for invite emails, support emails, announcement emails, and other transactional notifications.

Storage and security model

What is encrypted, what is temporary, and what is not yet private by design.

Selected sensitive database fields are encrypted before persistence. This currently includes items such as phone number, ABN, country, Google Drive refresh token, some payout details, some support content, and some project or receipt notes.
Authenticated account activity is recorded for security and audit purposes. Detailed route, IP, device, request, and response context is encrypted; credentials and authorization secrets are redacted. Decryption is restricted to the verified superadmin with MFA when an audit package is requested.
Personal-finance ledger data is stored as an encrypted file. By default that file lives in Gang Ledger-managed storage. If you connect Google Drive with the app-data permission, the encrypted file can instead be stored in your Google Drive appDataFolder.
Gang Ledger can still decrypt the personal ledger on the server while handling authenticated requests. The current system is encrypted at rest, but it is not end-to-end or zero-knowledge encryption.
Imported statement, receipt, income, and project document files may be uploaded to temporary object storage for parsing and then deleted after the import attempt completes, whether parsing succeeds or fails.
Receipt images and some uploaded project files are currently stored in Gang Ledger-managed object storage and may use public object URLs rather than the private-ledger model.
The browser may also store limited session or navigation state, and some legacy flows cache lightweight user context in local storage.

Sharing, controls, and requests

Who can see what and what choices you currently have.

Sharing inside the product

Your personal-finance ledger is intended for your account context, subject to the server-side processing described above.
Gang, ROSCA, receipt, and project data is shared with the members, owners, managers, reviewers, or admins who need that information to use the relevant workflow.
Support tickets and replies can be viewed by the Gang Ledger support or admin team members handling your request.
We may disclose data when required for security work, fraud prevention, legal compliance, or to protect users and the service.

Your controls

You can choose your country and preferred currency in your profile.
You can connect Google Drive for private-ledger storage or stop using that option later.
You can delete saved personal-finance records from within the tracker experience.
For broader privacy or deletion requests, use the in-app support flow after signing in so the request can be linked to the correct account.

Retention and updates

How long data may remain and how changes to this notice are handled.

Account, ledger, receipt, group, project, support, and notification records may remain stored while your account and related workspaces remain active, unless you delete records through the product or request a broader privacy review through support.

Temporary document uploads are handled differently: uploaded statement, receipt, income, and project files used for import parsing are deleted after the parsing attempt, while records you choose to save remain.

We may revise this policy as the product architecture changes. When that happens, the page date above should be updated to reflect the current implementation.

Need the setup guide first?

Read the onboarding guide if you want the feature flow explained before sharing data with the app.

The help guide explains when to use personal finance, group ledgers, shared receipts, and project finance, and it reduces accidental uploads into the wrong workflow.

Open quick start Sign in