Privacy Policy

Last updated October 14, 2026

PyraLedger.ai is operated by Prometheus Research Group ("we", "us"). This policy explains what information we collect when you use pyraledger.ai and app.pyraledger.ai (the "Service"), how we use it, and the choices you have.

What we collect

• Account information. Your name, email address, and a password (stored hashed, never in plain text).
• Business information. Your business name, fiscal year end, chart of accounts, and opening balances you enter.
• Financial records you upload. Bank and credit-card statement exports (CSV files) and the transactions inside them, plus any notes or categorizations you add.
• Usage information. Standard server logs (IP address, browser type, pages requested, timestamps) and an audit log of actions taken inside the Service.

We do not ask for, and you should not upload, bank login credentials, Social Security numbers, or card numbers beyond what appears in a standard statement export.

How we use it

• To provide the Service: categorizing transactions, keeping your ledger, closing periods, and producing reports and close packages.
• To support you: answering questions and resolving problems with your books.
• To secure the Service: detecting abuse, enforcing access controls, and keeping an audit trail of changes.
• To communicate with you about your account and your books.

We do not sell your information. We do not use your financial data for advertising.

AI processing

Transaction descriptions and amounts are sent to a third-party large-language-model provider to propose categorizations. Every proposal is reviewed by a person before it is posted to your ledger. We send only the fields needed for categorization, and our agreements with these providers prohibit them from training on your data.

Who else sees your data

We use these service providers to run the Service. Each receives only what it needs for its job:

• Fly.io — application hosting (United States).
• Neon — database hosting (United States).
• Cloudflare R2 — storage of uploaded statement files and generated reports.
• OpenRouter and the model providers it routes to — AI categorization.

We may also disclose information if required by law or to protect the rights and safety of our users or the Service. Your CPA or other advisors see your reports only when you share them.

Data isolation

Each client's records are kept separate at the database level. A client account can only see its own business. Only you and our operator staff can reach your books.

Retention

We keep your records for as long as your account is active. Closed periods and their close packages are kept so your history stays intact. If you close your account, we delete or anonymize your data within 90 days, except where we must keep it to meet legal or accounting obligations. Raw uploaded statement files in our processing queue are purged within 2 days of processing; the stored copy in your document archive remains until you delete it or close your account.

Security

Data is encrypted in transit (TLS) and at rest by our hosting providers. Passwords are hashed. Access to production systems is limited to the people who operate the Service. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you.

Cookies

app.pyraledger.ai sets a session cookie so you stay signed in. The marketing site at pyraledger.ai sets no tracking cookies and uses no third-party analytics.

Your choices

• You can view and correct your business information inside the Service.
• You can request a copy of your data, or deletion of your account, by emailing us.
• You can stop using the Service at any time.

Children

The Service is for businesses and is not directed at anyone under 18.

Changes

If we change this policy in a meaningful way, we will update the date above and, for material changes, notify account holders by email.

Contact

Prometheus Research Group
hello@prometheusresearch.group