Legal

Privacy Policy

Last updated: 03 June 2026

This policy explains what data BuildLedger collects, why we collect it, how we use it, and the rights you have over it.

1. Who We Are

BuildLedger is a business management platform operated by Webxpress Technologies(“we”, “us”, “our”). We provide tools for digital agencies and freelancers to manage clients, proposals, contracts, invoices, projects, and payments.

For questions about this policy, contact us at privacy@buildledger.com.

2. Data We Collect

2.1 Account Data

When you register, we collect your name, email address, and a hashed password. We never store your password in plain text.

2.2 Business Data

Data you enter into the platform — client records, proposals, contracts, invoices, project details, and payment records — is stored on your behalf and belongs to you.

2.3 Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used solely for security monitoring and performance optimisation.

2.4 Payment Data

Payment processing is handled by Paystack and Flutterwave. We do not store card numbers or bank account details. We receive only transaction references and status confirmations from these gateways.

2.5 Cookies

We use strictly necessary cookies for session management. We do not use advertising or tracking cookies.

2.6 Google Sign-In Data

If you choose to sign in with Google, we receive only the information required to authenticate your account through Google Sign-In: your Google account email address, your display name, and Google's unique account identifier for that user. We do not request or access your Google contacts, calendar, Drive files, Gmail content, or other Google services.

3. How We Use Your Data

To provide, maintain, and improve the BuildLedger platform.
To send transactional emails (invoice notifications, contract signing alerts, payment confirmations).
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations.
To create, sign in, verify, and link your BuildLedger account when you use Google Sign-In.

We do not sell your data to third parties. We do not use your business data to train AI models.

Google user data accessed through Sign-In is used only for authentication, account creation or linking, invite eligibility, and account security. We do not use Google user data for advertising, profiling, or unrelated secondary purposes.

4. Data Sharing

We share data only with the following categories of third parties, and only to the extent necessary:

Google OAuth services — to authenticate your Google account and verify your sign-in token.
Payment processors — Paystack, Flutterwave (for payment initiation and verification).
Cloud infrastructure — hosting providers for servers and file storage.
Email delivery — transactional email providers for notification delivery.
Legal authorities — when required by applicable law or court order.

5. Data Retention

We retain personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, or for as long as retention is required or permitted by applicable law, regulation, tax, accounting, fraud prevention, dispute resolution, or security obligations. In ordinary operation, account-related data is retained while the account remains active.

Where you request deletion or close your account, we will delete or anonymise personal data from active systems within 30 days of confirming the request, except where we are required or permitted to retain certain records for legal, regulatory, tax, accounting, or security purposes. In such cases, we retain only the minimum data necessary and restrict access to it accordingly.

Backup copies are maintained on a rolling rotation schedule and are not used for day-to-day access. Backup snapshots, including uploaded files and company logos, are encrypted before storage. Where deleted data remains present in a backup set, it will be removed or rendered inaccessible in accordance with the applicable backup rotation and restoration procedures.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data (“right to be forgotten”).
Export your data in a portable format.
Object to or restrict certain processing activities.

To exercise any of these rights, email privacy@buildledger.com.

We aim to respond to download, rectification, and deletion requests within 30 days of receiving a complete request and any information reasonably required to verify your identity and process the request.

7. Security

We implement industry-standard security measures including HTTPS encryption in transit, hashed passwords (bcrypt), HTTP security headers, and rate limiting on authentication endpoints. No system is perfectly secure; we encourage you to use a strong, unique password.

8. Children

BuildLedger is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email and update the “Last updated” date above. Continued use of the platform after changes constitutes acceptance.