This Privacy Policy explains how Lulu Labs LLC collects, uses, stores, shares, retains, and protects information when you use Lulu Ledger.
By using Lulu Ledger, you agree to this Privacy Policy.
1. Overview
Lulu Ledger is a business recordkeeping and financial organization software platform.
We collect and process information to provide the service, including account information, business financial information, transaction information, receipt data, mileage data, deal records, reports, payment information, technical data, and support communications.
Lulu Ledger does not sell your personal information.
Lulu Ledger does not sell your financial data, transaction data, receipt data, report data, business records, or user-entered data.
Lulu Ledger does not use your connected financial data, receipts, income records, expense records, mileage logs, deal records, or reports for targeted advertising.
2. Information We Collect
We may collect the following categories of information.
Account Information
This may include: name; email address; business name; login information; account settings; subscription status; user preferences; support history; communications with us.
Business and Financial Information
Depending on how you use Lulu Ledger, we may collect or process: income records; expense records; transaction records; transaction descriptions; transaction dates; transaction amounts; categories; merchant names; receipt images; uploaded documents; mileage entries; deal records; payment sources; reports; notes; CSV imports; CSV exports; business financial summaries; and other information you enter, upload, import, sync, or connect.
Connected Financial Account Information
If you connect bank accounts, credit cards, or other financial accounts through third-party providers such as Plaid or similar services, we may receive transaction-related information needed to provide Lulu Ledger.
This may include: financial institution name; account name; account type; partial account identifiers; transaction dates; transaction amounts; transaction descriptions; merchant data; category data; balance information; related metadata.
Lulu Ledger does not store your full online banking login credentials. Bank connections are handled through third-party providers such as Plaid.
Payment and Subscription Information
Payments may be processed by third-party payment processors such as Stripe.
We may receive limited billing information, including: subscription status; payment confirmation; billing email; billing name; billing address; last four digits of a payment card; payment method type; invoice history; failed payment notices.
We do not intentionally store full credit-card numbers.
Uploaded Content
We may collect files or images you upload, including receipts, invoices, documents, screenshots, notes, and other attachments.
Technical and Usage Information
We may collect: IP address; browser type; device type; operating system; log data; pages viewed; features used; error reports; performance data; session data; timestamps; referring URLs; approximate location; cookie or analytics data; security-related events.
Communications
We may collect information you provide when you: contact support; submit feedback; respond to surveys; participate in beta testing; report bugs; request help; or communicate with us by email or through the service.
3. How We Use Information
We use information to:
- Create and manage accounts;
- Provide Lulu Ledger's features;
- Import, display, categorize, and organize financial data;
- Generate dashboards, reports, summaries, estimates, and exports;
- Store receipts and documents;
- Track mileage and deal-related records;
- Process subscriptions and payments;
- Provide customer support;
- Troubleshoot errors, bugs, sync issues, and performance problems;
- Improve product functionality, reliability, usability, and security;
- Detect fraud, abuse, unauthorized access, or security risks;
- Monitor service performance;
- Send account, billing, product, support, and security communications;
- Comply with legal, tax, accounting, regulatory, and business obligations;
- Enforce our Terms of Service;
- Protect the rights, safety, property, and security of Lulu Labs LLC, users, and others.
4. No Sale of Personal Data
Lulu Ledger does not sell your personal information.
Lulu Ledger does not sell, rent, trade, or disclose your personal information, financial transaction data, receipt data, business records, reports, or user-entered data to data brokers or third parties for their independent advertising, marketing, profiling, or commercial use.
Lulu Ledger does not use your connected financial data, receipts, income records, expense records, mileage logs, deal records, or reports for targeted advertising.
Limited Disclosures to Service Providers
To operate Lulu Ledger, we may disclose or make available limited information to trusted service providers and integration partners, such as payment processors, financial-data connection providers, hosting providers, database providers, analytics tools, email providers, security tools, and customer-support tools.
For example, if you subscribe to Lulu Ledger, payment-related information may be processed by Stripe or another payment processor. If you choose to connect a bank account or credit card, financial account and transaction information may be processed through Plaid or another financial-data connection provider.
These providers may process information only as needed to provide their services, support Lulu Ledger's functionality, maintain security, process payments, connect financial accounts, prevent fraud, comply with law, or perform other operational purposes.
We do not authorize these providers to sell your personal information or use your Lulu Ledger financial records for their own independent advertising or marketing purposes.
5. Service Providers
To operate Lulu Ledger, we may use third-party service providers, including: hosting providers; database providers; payment processors; bank-data connection providers; analytics providers; error logging tools; customer-support tools; email providers; security tools; cloud infrastructure providers; software development tools; and other operational vendors.
These providers may process limited information only as needed to perform services for Lulu Ledger.
We do not authorize these providers to sell your personal information or use your financial data, receipts, reports, or business records for their own unrelated purposes.
6. Financial Integrations
If you connect financial accounts, Lulu Ledger may exchange information with third-party financial integration providers, banks, payment processors, card issuers, or other financial technology services.
These providers may have their own terms, privacy policies, and security practices.
Lulu Ledger is not responsible for the privacy, security, availability, accuracy, or data practices of third-party providers.
You may disconnect linked accounts where the service allows or by contacting us for support.
7. Data Accuracy
Lulu Ledger relies on information provided by you and third-party services. We do not guarantee that imported, synced, categorized, uploaded, manually entered, automatically suggested, or exported data is accurate, complete, current, properly classified, tax-compliant, legally sufficient, or suitable for any specific purpose.
You are responsible for reviewing and verifying your information before using it for accounting, tax, legal, lending, financial, business, compliance, or reporting purposes.
8. Sensitive Financial Information
Lulu Ledger may process sensitive business and financial information, including transaction records, receipts, account names, payment sources, mileage logs, deal records, income records, expense records, and related business data.
We use this information to provide Lulu Ledger's features, including tracking, categorization, reporting, importing, exporting, receipt storage, tax-estimate planning, deal tracking, and business organization.
You should not upload information that is not necessary for your business recordkeeping purposes.
9. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information and user data.
These measures may include access controls, account authentication, encryption where appropriate, vendor controls, monitoring, backups, and other safeguards.
However, no software platform, internet transmission, database, hosting provider, financial integration, cloud system, or method of electronic storage can be guaranteed to be completely secure.
Lulu Ledger does not guarantee absolute security, uninterrupted access, permanent data preservation, or protection against every unauthorized access, cyber incident, data loss, outage, error, or service interruption.
You are responsible for protecting your login credentials, devices, email account, and account access.
FTC guidance specifically emphasizes that businesses should pay close attention to financial information and other sensitive data, and should build reasonable data-security practices into operations.
10. Data Retention After Trial, Cancellation, or Expiration
We retain information while an account is active and as reasonably necessary to provide Lulu Ledger, operate our business, process payments, provide support, comply with legal obligations, maintain billing and tax records, resolve disputes, prevent fraud, protect security, enforce agreements, maintain backups, and improve the service.
When a free trial or paid subscription expires, normal product access is paused. New bank and card transactions stop importing, and reports and exports become unavailable. You may still sign in to manage billing, reactivate the account, or request account deletion.
Lulu Ledger generally retains eligible account data for 90 days after trial or paid access ends. This retention period allows customers to reactivate without starting over. Lulu Ledger may provide notice before eligible account data is scheduled for deletion, but customers are responsible for exporting needed records before access ends and keeping their contact information current.
After the retention period, eligible account data may be deleted or anonymized. Some information may remain temporarily in encrypted backups, logs, archives, or disaster-recovery systems until removed through normal backup cycles.
We may retain certain records longer where reasonably necessary for legal, security, fraud-prevention, dispute-resolution, billing, payment, tax, accounting, financial, compliance, or operational purposes.
You may request earlier account deletion. We will take reasonable steps to delete or de-identify eligible personal information, subject to information we are permitted or required to retain.
You are responsible for exporting or saving needed records before your trial or paid access ends. Account deletion does not create a refund.
For more information about trial expiration, subscription cancellation, refunds, and post-access account status, see the Refunds & Cancellation Policy.
11. User Controls
Depending on available features, you may be able to: view account information; edit account information; add, edit, categorize, export, or delete transactions; upload or delete receipts; connect or disconnect financial accounts; export reports; export CSV files; cancel subscriptions; update payment details; and contact us to request access, correction, deletion, or a copy of certain information.
After product access expires, some controls, reports, and exports may be unavailable unless the account is reactivated.
Some information may not be deleted immediately or completely if retention is required or permitted for legal, security, backup, billing, tax, accounting, fraud-prevention, dispute-resolution, or operational reasons.
12. State Privacy Rights
Depending on your state of residence and applicable law, you may have rights regarding your personal information.
These rights may include the right to: request access to certain personal information; request correction of inaccurate personal information; request deletion of certain personal information; request a copy of certain personal information; opt out of certain uses of personal information where applicable; appeal a denied request where required by law; and limit certain sensitive-data processing where applicable.
Because state privacy laws vary and often depend on company size, revenue, number of users, data volume, processing activity, and statutory thresholds, certain laws may not apply to Lulu Ledger at all times.
Where legally required, Lulu Ledger will comply with applicable privacy laws.
Where a privacy law does not legally apply, Lulu Ledger may still provide reasonable privacy controls as a business practice, but doing so does not waive any legal exemption or create additional obligations beyond this Privacy Policy or our Terms of Service.
To submit a privacy request, contact: support@lululedger.com
We may require identity verification before processing a request.
We may deny, limit, or delay requests where permitted by law, including where information is needed to: provide the service; maintain business records; complete transactions; prevent fraud or abuse; protect security; comply with legal obligations; resolve disputes; enforce agreements; or maintain backup, audit, tax, accounting, billing, or compliance records.
13. California, Colorado, Connecticut, and Other State Notices
Some states provide additional privacy rights or require specific disclosures depending on whether a business meets certain legal thresholds.
Lulu Ledger does not intend to sell personal information or share personal information for targeted advertising.
Lulu Ledger does not intend to use financial transaction data, receipt data, report data, or business records for targeted advertising.
If Lulu Ledger becomes subject to additional state-specific privacy requirements, we may update this Privacy Policy, provide required notices, and implement additional controls where legally required.
14. Cookies and Analytics
We may use cookies, pixels, local storage, analytics tools, log files, session tracking, and similar technologies to: operate Lulu Ledger; keep users logged in; remember preferences; understand product usage; improve performance; identify errors; prevent fraud; support security; analyze marketing effectiveness; and improve the user experience.
You may be able to limit cookies through your browser settings. Some features may not work properly if cookies are disabled.
We do not use your private financial records for targeted advertising.
15. Email Communications
We may send service-related emails, including: account notices; billing notices; security alerts; password reset emails; product updates; policy updates; support communications; and trial or subscription notices.
Where permitted, we may send marketing or promotional emails. You may unsubscribe from marketing emails, but you may still receive transactional, account, billing, legal, or service-related messages.
16. Aggregated and De-Identified Information
We may use aggregated, anonymized, or de-identified information to: analyze usage; improve Lulu Ledger; monitor performance; identify trends; develop features; improve security; support business planning; and create general business insights.
We will not intentionally use aggregated or de-identified information to personally identify you.
17. AI and Automated Processing
Lulu Ledger may use automated systems, rules, algorithms, artificial intelligence, or third-party tools to provide features such as categorization, suggestions, summaries, insights, error detection, or user support.
Automated processing may be inaccurate, incomplete, or inappropriate for your specific circumstances.
You are responsible for reviewing and confirming all automated outputs before relying on them.
We do not use your private financial records to train public AI models unless specifically disclosed and permitted.
18. Children's Privacy
Lulu Ledger is intended for business users and is not directed to children under 13.
We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it.
19. International Users
Lulu Ledger is operated from the United States.
If you access Lulu Ledger from outside the United States, you understand that your information may be processed and stored in the United States or other jurisdictions where our service providers operate.
If we expand internationally or become subject to international privacy laws, we may update this Privacy Policy and related practices.
20. Business Transfers
If Lulu Labs LLC is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, investment transaction, or similar business transaction, information may be transferred as part of that transaction.
The receiving party may continue to use information consistent with this Privacy Policy unless otherwise disclosed.
21. Legal Disclosures
We may disclose information if we believe disclosure is necessary or appropriate to: comply with law; respond to subpoenas, court orders, legal process, or government requests; protect our rights, property, users, business, or service; enforce our Terms of Service; investigate fraud, abuse, or security issues; prevent harm; resolve disputes; or comply with tax, accounting, regulatory, or legal obligations.
22. Data Breach and Security Incident Response
If we become aware of a security incident involving personal information, we will take reasonable steps to investigate, respond, mitigate harm where appropriate, and provide notices where required by applicable law.
Not every security event, bug, outage, or system issue is a legally reportable data breach.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates may reflect changes in our service, vendors, integrations, business operations, privacy laws, security practices, or data practices.
If we make material changes, we will make reasonable efforts to provide notice, such as posting an updated policy, updating the effective date, notifying users through the service, or sending an email where appropriate.
Your continued use of Lulu Ledger after an updated Privacy Policy becomes effective means you accept the revised policy.
24. Contact
Questions about this Privacy Policy or privacy requests may be sent to:
Lulu Labs LLC
Email: support@lululedger.com
Address: 2312 Wilton Drive, Suite 25C, Wilton Manors FL 33305