Privacy Policy

Dimeledger helps small businesses track expenses and allocate them to IRS tax form lines. This policy explains what we collect, why, and the choices you have.

Information we collect

• Account: your email address and an encrypted password.
• Business profiles: business and entity names, tax form, tax year, fiscal year, home-office percentage and rental property names you enter.
• Transactions: dates, amounts, merchants, descriptions, categories, notes and splits you enter, import by CSV, or sync from a bank.
• Receipts: images you upload and the details read from them (amount, date, merchant, line items).
• Bank connections: when you link a bank through Plaid, we receive account names, masks (last digits), types and transactions. We never see or store your bank username or password. The access token Plaid issues is stored on our servers only and is never sent to your browser.
• Sync and email records: sync history, errors and alert delivery status.

How we use it

• To provide the ledger, tax rollups and CPA exports.
• To automatically sort transactions using your keyword rules.
• To send account emails (such as password resets) and bank sync-failure alerts you turn on.

We do not sell your data and do not use it for advertising.

How AI is used

When you choose to scan a receipt, ask for a category suggestion, or use "Sort with AI", the relevant receipt image or transaction details — and, for bulk sorting, examples of your past categorized transactions — are sent to an AI model provider to generate suggestions. AI never changes your records on its own; suggestions apply only when you accept them. Our AI providers process this data to return results and do not use it to train their models under our agreements.

Service providers

• Plaid — bank connections (see Plaid's End User Privacy Policy at plaid.com/legal).
• Cloud hosting and database — storage of your account and records, encrypted in transit and at rest.
• AI model providers — only for the AI features described above.
• Email delivery — account and alert emails.

Security

Each account can access only its own businesses and records. Receipt images are stored privately. Bank access tokens are server-only. No system is perfectly secure; please use a strong, unique password.

How long we keep data

We keep your records while your account is active so you can meet IRS recordkeeping requirements (generally 3 to 7 years). When you delete a business or your account, the related records, receipt files and bank connections are deleted promptly, and residual backups expire within 30 days.

Your rights and choices

• Access and export: download all your data at any time from Account & data in the app.
• Disconnect banks: disconnect any linked bank on the Import page; we also revoke the connection with Plaid.
• Delete: delete your entire account and data from Account & data.
• Correct: edit any record in the app.

California residents have rights under the CCPA/CPRA to know, delete, correct and opt out of sale or sharing. We do not sell or share personal information as those terms are defined.

Children

Dimeledger is not intended for anyone under 18.

Changes and contact

We will post updates here and notify you of material changes. Questions or requests: privacy@dimeledger.com.