Privacy Policy

Effective August 21, 2026

This policy explains how Greater Iowa Advisory Group uses information through Ledgerly, its secure accounting operations and client portal. It applies to visitors, clients, authorized client representatives, and firm personnel who use Ledgerly.

Information we collect

We collect information you or an authorized firm user provide, including contact details, client and business profile information, accounting records, transaction explanations, documents, workflow activity, communications, and payment or invoice status.

When you choose Google sign-in, Google provides Ledgerly with your Google account identifier, name, email address, email-verification status, authentication time, and available authentication-method signals. Ledgerly requests only the openid, email, and profile scopes. Ledgerly does not request access to Gmail, Google Drive, contacts, calendars, or other Google account content.

How we use information

• Authenticate users through a verified Google sign-in, record available authentication-method evidence, and maintain secure sessions.
• Confirm that a signed-in email belongs to an authorized firm or client membership.
• Provide accounting workflows, document exchange, reporting, client requests, communications, billing support, and audit trails.
• Protect Ledgerly, investigate misuse, maintain availability, and meet professional, legal, and regulatory obligations.

Google user data

Ledgerly uses Google user data only to identify and authenticate you and to evaluate the authentication security signals Google returns. It does not use Google user data for advertising, sell it, or transfer it for unrelated purposes. Ledgerly does not store Google access tokens or Google ID tokens. It stores the verified account identifier, email address, display name, authentication-method evidence, authentication time, and a one-way hash of the Ledgerly session token.

Sharing and service providers

Information may be available to authorized Greater Iowa Advisory Group personnel and authorized members of the applicable client workspace. We use service providers to operate Ledgerly, including secure hosting and storage, Google for authentication, email delivery providers for controlled communications, and payment processors for provider-hosted checkout. These providers receive information only as needed to perform their services. We may also disclose information when required by law, to protect rights or security, or as part of a business transfer subject to appropriate safeguards.

Security and retention

Ledgerly uses encrypted HTTPS transport, signed identity-token verification, short-lived server sessions, role-based authorization, firm and client isolation, audit logging, and controlled document storage. No system can guarantee absolute security.

Ledgerly sessions expire after eight hours. Identity and workspace records are retained while needed to provide services, maintain audit and accounting records, resolve disputes, and satisfy legal or professional obligations. Client documents follow configured retention schedules, generally seven years by default, and may be preserved longer when subject to a legal hold.

Your choices

You may sign out at any time and may contact us to request access, correction, or deletion of personal information. Some information may need to be retained for accounting, audit, contractual, security, or legal reasons. Removing Google access from your Google Account does not automatically delete records that Ledgerly must retain; contact us for assistance.

Children and changes

Ledgerly is a business and professional-services portal and is not directed to children under 13. We may update this policy as Ledgerly or applicable requirements change. The effective date above identifies the current version.

Contact us