Privacy Policy

1. Introduction

Welcome to Quaestor Ledger ("we," "our," or "us"), a service operated by SilkTech, LLC d/b/a Quaestor Ledger. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share your information when you use our website (quaestorledger.com) and our AI-powered financial tracking services.

2. Information We Collect

We collect information that you voluntarily provide to us when you use the App:

• Account Information: Email address and authentication details.
• Financial & Receipt Data: Images of receipts, invoices, and the data extracted from them (e.g., merchant names, dates, transaction totals).
• Connected Bank Data (Read-Only): If you link your bank accounts, we receive read-only transaction data to categorize your ledger. We do not collect, process, or store your bank login credentials. This is handled through a secure financial-data connection partner.
• AI Chat Prompts & Interactions: When you interact with the Quaestor Intelligence chat agent, we collect the text of your queries and the contextual financial data required to answer your questions. Do not input Sensitive Personally Identifiable Information (PII) such as Social Security Numbers, full unmasked bank account numbers, or passwords into the AI chat interface.
• Payment Information: If you subscribe to a paid plan, your payment details are processed by a third-party payment processor. Unless expressly stated otherwise at checkout, SilkTech, LLC d/b/a Quaestor Ledger is the seller and merchant of record for subscriptions. We do not store your full credit card number or raw payment card data on our servers.
• Usage Data: Information about how you interact with the Service, including pages or screens viewed, feature usage, device/browser information, log data, approximate location derived from IP address, diagnostic data, and interactions with AI agents and dashboard features.

3. Age Restrictions

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. The Service is intended for users who are at least 18 years old or the age of majority in their jurisdiction. If we learn that we have collected information from a child under 13, we will take reasonable steps to delete it.

4. How We Use Your Information

We use your data to:

• Provide and manage your account.
• AI Processing and Data Controls: We use AI and cloud services to process receipt images, extracted transaction data, categorized transaction strings, and user prompts solely to provide the Service. We do not use your personal financial data, receipt images, or prompts to train AI or intelligence systems. Where available and applicable, we configure those services to restrict training use of customer content. Retention may vary depending on the service, feature, abuse-monitoring requirement, legal obligation, and security configuration.
• Improve our application and user experience.
• Comply with legal obligations.

5. Data Retention

We retain account, ledger, receipt, linked-account, chat, usage, security, and billing-related records for as long as your account is active or as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, prevent fraud or abuse, enforce our agreements, maintain backups, and support tax/accounting records. If you delete your account, we will delete or de-identify personal data within a commercially reasonable period, except where continued retention is required or permitted for the reasons above.

6. Account Deletion

You may request deletion of your account by contacting support@quaestorledger.com or using any account-deletion feature made available in the Service. Deleting your account may permanently remove access to your ledger, receipts, transaction history, chat history, and account configuration, subject to limited retention for legal, security, billing, backup, and dispute-resolution purposes.

7. Sharing Information with Third Parties

We do not sell your personal data for money. We share personal data only with service providers and integration partners reasonably necessary to operate the Service, process payments, provide AI extraction and chat features, connect financial accounts, host infrastructure, provide security, analyze usage, comply with law, and protect our rights. These providers may process data only as permitted by our agreements and applicable law.

• AI and Intelligence Services: We may transmit receipt images, extracted receipt data, categorized transaction data, user prompts, and relevant account context to AI services solely to provide receipt extraction, categorization, analytics, and conversational features. We do not authorize these services to use customer content to train AI or intelligence systems, except where a user has separately consented or where applicable law permits or requires processing.
• Cloud Hosting: Our infrastructure is hosted by cloud service providers.
• Financial Data Aggregators: We use secure financial-data connection services to connect your external bank accounts. Your use of those services may be subject to their own terms and privacy policies.
• Payment Processors: We use third-party payment processors to process subscription payments securely.
• Analytics: We may use tools to analyze website traffic (anonymized where possible).

8. Connected Financial Accounts

If you choose to connect financial accounts, you authorize us and our financial-data connection partners to access, process, and transmit read-only account, balance, transaction, institution, and related financial data as needed to provide the Service. We do not receive or store your bank login credentials.

9. Cookies and Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to operate the Service, keep users signed in, remember preferences, improve performance, analyze usage, prevent fraud, and measure marketing effectiveness. Where required, we will provide choices or obtain consent before using non-essential cookies.

10. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal and financial data, including encryption in transit and at rest, access controls, authentication controls, logging, monitoring, and third-party security review where appropriate. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Security Incidents

If we determine that a security incident requires notice under applicable law, we will provide notice to affected users and regulators as required. We may also notify users of security issues when we believe notice is appropriate to help protect accounts or data.

12. Your Rights

Depending on your location, you may have the right to access, correct, delete, or obtain a portable copy of personal data we maintain about you. You may also have the right to opt out of certain processing activities, including targeted advertising, sale of personal data, or certain profiling activities, where applicable. We do not sell personal data for money. To exercise rights, contact support@quaestorledger.com. We may verify your identity before fulfilling a request. If we deny a request, you may appeal by replying to our denial notice or contacting support@quaestorledger.com with the subject line "Privacy Appeal." We will not discriminate against you for exercising privacy rights.