How AAF Ledgers handles information.

1. Notice at collection

We collect work email addresses and account identifiers to verify workspace access, send secure authentication links, administer accounts, provide support, and protect the service. If you use the service, we also collect workspace activity, uploaded AAF content and metadata, generated reports, processing diagnostics, and subscription records for the purposes described below. We do not sell or share personal information for cross-context behavioral advertising.

2. Information we collect

• Account and contact information: work email, display name, workspace membership, role, invitations, and support communications.
• Customer materials: uploaded AAF files, embedded metadata, selected report columns, presets, generated reports, and processing diagnostics.
• Usage and technical information: job timing and duration, processing minutes, source application, errors, security events, and standard request information needed to operate and protect the service.
• Billing information: subscription status, Stripe customer and subscription identifiers, purchase and invoice records, billing address information handled through Stripe, renewal consent, and legal acceptance records. AAF Ledgers does not receive full payment-card numbers.

3. Sources

We receive information directly from users and workspace owners, from AAF files users upload, automatically through use of the service, and from providers that support authentication, payment, hosting, processing, and email delivery.

4. How information is used

We use information to authenticate users; create and administer workspaces; process AAF files; produce and deliver reports; meter usage; manage subscriptions and payments; send transactional notices; provide support; prevent fraud and abuse; diagnose, secure, and improve the service; enforce our Terms; and comply with legal obligations.

5. Service providers and disclosures

We disclose information only as reasonably necessary to operate the service, including to Cloudflare for application hosting, private file storage, and processing; Supabase for authentication; Stripe for subscriptions, billing, and payment processing; and Resend for transactional email delivery. We may also disclose information to professional advisers, authorities when legally required, to protect rights and safety, or as part of a merger, financing, acquisition, or sale of assets. Providers process information under their own agreements and privacy terms.

6. File lifecycle and retention

• Raw AAF files are deleted promptly after successful processing.
• Failed or abandoned uploads are deleted within 24 hours.
• Generated reports and processed data are deleted after seven days.
• The dashboard displays the four most recent jobs.
• Job and billing metadata is retained separately as needed for usage, accounting, security, dispute, and legal purposes. Filenames and storage references are removed or minimized after related files are deleted.
• Account, workspace, subscription, renewal-consent, and legal-acceptance records are retained while needed to provide the service and afterward as reasonably necessary for legal, tax, audit, fraud-prevention, and dispute-resolution purposes.

AAF Ledgers does not provide a customer backup or restoration guarantee.

7. Workspace administrators

Workspace owners may invite and remove members and may access, manage, export, restrict, or delete organizational job information through available controls or by contacting support. An organization may separately control information submitted by its personnel. Users should direct organization-specific access questions to their workspace owner.

8. Security

We use administrative, technical, and organizational measures designed to protect information, including authenticated access, private storage, transport encryption, restricted processing services, and scheduled deletion. No security measure or transmission method can guarantee absolute security.

9. Choices and rights

You may request access, correction, deletion, or information about our handling of personal information by emailing support@aafledgers.com. We will verify requests and respond as required by applicable law. Certain records may be retained where needed for security, billing, tax, legal compliance, or the establishment and defense of claims. We will not discriminate against a person for exercising applicable privacy rights.

10. Cookies and local storage

The service uses authentication tokens and limited browser storage necessary for secure sign-in, session continuity, and user-requested preferences such as report presets. We do not use this information to sell personal information or for cross-context behavioral advertising.

11. Children

AAF Ledgers is a business service and is not directed to children under 13. We do not knowingly collect personal information from children.

12. Changes and archived versions

We may update this Policy as the service or legal requirements change. Material revisions receive a new effective date and version. Prior versions remain available in the legal archive. We will provide additional notice or obtain acknowledgment where required.

13. Contact

Privacy questions and requests may be sent to support@aafledgers.com.