AGLedger Privacy Policy

Effective Date: April 7, 2026 Last Updated: September 15, 2026 Version: 1.11

1. Who We Are

AGLedger LLC ("AGLedger," "we," "us," or "our") operates the website at agledger.ai, agledger.io, and their respective subdomains.

Contact: AGLedger LLC Email: privacy@agledger.ai Web: https://agledger.ai

2. Scope

This Privacy Policy describes how we collect, use, and protect information when you visit our Website (agledger.ai, agledger.io, and their respective subdomains).

This policy does not apply to the AGLedger software product. We do not access, process, or store any data that you put into your AGLedger deployment. Your use of the AGLedger software is governed by the Software License Agreement.

3. Information We Collect

3.1 Automatically Collected Information

When you visit the Website, we automatically collect:

• Aggregate analytics via Cloudflare Web Analytics: pages visited, referral source, and approximate geographic location (country/region), measured cookielessly. Cloudflare Web Analytics sets no cookies, uses no client-side fingerprinting, and assigns no cross-site or persistent visitor identifier; metrics are aggregate page-view counts, not individual visitor profiles.
• Server logs collected by our hosting provider (Hostinger): IP address, request timestamps, URLs accessed, HTTP status codes, user agent string.
• Click-to-load videos. The product videos (YouTube) on the Website are loaded only after you click to activate them. Nothing is sent to YouTube until you do. Once you activate a video, YouTube receives your IP address and browser data and may set its own cookies or identifiers, as described in Sections 5 and 6.

3.2 Information You Provide

If you contact us by email (e.g., sales@agledger.ai, security@agledger.ai, support@agledger.ai), we collect the information you include in your message: name, email address, company name, and message content.

Developer Edition registration. If you request a Developer Edition License Key through the registration form on our Website, we collect your organization name, your email address, and your selection of intended use. We record these together with the identifier of the license key issued to you and the date of issuance. We use this information to maintain a record of who holds a Developer Edition License Key and to contact you about that key.

3.3 No Software Usage Data

AGLedger does not collect product usage information from your self-hosted AGLedger deployment (Enterprise or Developer Edition). Anything you send us when asking for help is email correspondence under Section 3.2.

3.4 Information We Do Not Collect

• We do not require account creation to use the Website. Registration is required only to obtain a Developer Edition License Key (see Section 3.2).
• We do not collect payment card data through the Website.
• We do not use tracking pixels, social media trackers, or advertising networks.

4. How We Use Information

We use the information we collect for the following purposes:

• Website improvement: Understanding how visitors use the Website to improve content and navigation.
• Analytics: Measuring Website traffic and identifying popular content at an aggregate level.
• Communication: Responding to your inquiries and providing requested information.
• Security: Detecting and preventing abuse, unauthorized access, and security incidents.

We do not use your information for targeted advertising, behavioral profiling, or automated decision-making.

5. How We Share Information

We share information only with the following categories of recipients:

We do not sell, rent, or trade your personal information to any third party. We do not share personal information for cross-context behavioral advertising.

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of AGLedger, our users, or the public.

6. Cookies

The Website sets no analytics, advertising, or tracking cookies. Our web analytics (Cloudflare Web Analytics) are cookieless: they record aggregate page views without storing a cookie on your device or assigning you a persistent or cross-site identifier. We do not use cookies for advertising, retargeting, or cross-site tracking.

One third-party embed is the exception, and it is click-to-load: the YouTube product videos are not contacted, and set nothing, until you click to activate them. Activating a video is your choice to load YouTube's content; once loaded, YouTube may set cookies or identifiers under its own privacy policy (see Section 5).

If your browser session involves a strictly necessary cookie set by our CDN/security provider (Cloudflare) for load balancing or bot mitigation, it is used solely to deliver and protect the Website and is exempt from consent under the ePrivacy Directive Article 5(3) "strictly necessary" exception.

7. Data Retention

• Web analytics data: Cloudflare Web Analytics stores only aggregate, non-personal page-view metrics; no individual visitor record is created or retained.
• Server logs: Retained per Hostinger's standard retention policy (typically 30 days).
• Email correspondence: Retained for the duration of the business relationship or inquiry, then deleted upon request.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data.
• Restriction: Request that we restrict processing of your personal data.
• Portability: Request your personal data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.

Legal basis for processing: We process personal data based on legitimate interest (cookieless website analytics for improving the Website and ensuring security). Because our analytics are cookieless and set no non-essential cookies, no consent is required for them under the ePrivacy Directive; any strictly necessary CDN/security cookies are likewise consent-exempt.

To exercise your rights, contact us at privacy@agledger.ai. We will respond within the timeframe required by applicable law.

Appeal right (EU/UK). If we decline any request, our response will explain the reason and your right to lodge a complaint with your local data protection authority, and your right to a judicial remedy.

9. Your Rights Under CCPA/CPRA

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) provides you with the following rights:

• Right to know: Request the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request deletion of your personal information.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your rights.

Categories of personal information collected in the preceding 12 months:

To exercise your rights, contact us at privacy@agledger.ai. We will verify your identity and respond within the timeframe required by applicable law.

Designated method for submitting requests. AGLedger operates exclusively online; email to privacy@agledger.ai is the designated method for submitting requests under California Civil Code § 1798.130(a)(1)(A).

Global Privacy Control (GPC). AGLedger honors the Global Privacy Control browser signal (Sec-GPC: 1) as a valid opt-out of sale and sharing under California Civil Code § 1798.135(b) and the corresponding regulations of the California Privacy Protection Agency (CCR Title 11, § 7025). As stated in Section 5, AGLedger does not sell or share Personal Information, so no further action is required on a GPC signal, and none is needed from you.

10. International Data Transfers

Our website uses Cloudflare (CDN and cookieless, aggregate analytics), Hostinger (website hosting; server logs stored in the EU), and, only when you click to activate them, YouTube (embedded videos), operated from the United States. To the extent these vendors process any limited website data outside your region, it is subject to the vendors' own transfer safeguards.

11. Children's Privacy

The Website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it promptly.

12. Security

We implement reasonable technical and organizational measures to protect the information we collect. However, no method of transmission or storage is 100% secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on the Website with an updated "Last Updated" date.

14. EU / UK Representatives

AGLedger is established in the United States. To the extent Article 27 does apply, AGLedger will designate a representative if and when required by law. EEA and UK individuals and supervisory authorities may contact AGLedger directly at privacy@agledger.ai.

15. Sub-processors

A current list of sub-processors engaged by AGLedger is published at agledger.ai/subprocessors.

16. Contact

For privacy-related inquiries or to exercise your data rights:

AGLedger LLC Privacy: privacy@agledger.ai Security: security@agledger.ai Web: https://agledger.ai