Privacy Policy

Ledger Optics · Effective date: 21 July 2026

This Privacy Policy explains how QADAN ANALYSIS CONSULTING PTY LTD (ABN 20 655 113 670) ("we", "us", "our"), the operator of Ledger Optics (the "Service"), collects, uses, stores and discloses information when you connect the Service to your Xero organisation. We handle personal information in a manner consistent with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. What Ledger Optics does

Ledger Optics is a web application for bookkeepers and accountants. It connects to your Xero organisation using OAuth 2.0 and helps you find and correct inconsistent accounting data — for example, records whose account code, GST tax type, or tracking category disagrees with their peers. You review each suggested change, and nothing is written back to Xero unless you explicitly approve it.

2. Information we access and why

Identity (sign-in)

When you sign in, we read your Xero identity via OpenID Connect — your name and email address — solely to authenticate you and associate your session with your account.

Accounting data (read)

To detect inconsistencies, the Service reads the following from your connected Xero organisation:

This data is fetched on demand, displayed to you in the Service, and then discarded. We use it only to power the analysis and correction features you request.

Accounting data (write)

Only when you explicitly click to apply a change, and on a per-change basis, the Service writes corrections back to Xero. These may include corrected account codes, GST/tax types, tracking categories, and account types. The Service makes no automated changes.

Optional AI features (off by default)

Ledger Optics includes an optional, opt-in AI assistant that suggests how records should be classified, and a "learns from your corrections" feature. These are off by default and require you to explicitly enable them and supply your own Anthropic (Claude) API key.

3. How we store and protect information

4. Data retention and deletion

We retain your stored session and encrypted token record only for as long as your connection is active. When you log out or disconnect the Service, that stored session/token record is deleted. You can also revoke the Service's access at any time from within Xero (see our Support page).

To request full deletion of any information associated with your account, email us at info@qadan.com.au and we will action your request.

5. Disclosure to third parties

We do not sell, rent, or trade your personal information, and we do not share it with third parties for their own purposes. The Service interacts with:

We may also disclose information where required by law.

6. Overseas disclosure

Our hosting provider may process or store data in data centres located in or outside Australia. Where information is handled overseas, we take reasonable steps to ensure it is handled consistently with the APPs.

7. Accessing and correcting your information

Under the APPs you may request access to the personal information we hold about you and ask us to correct it. Contact us using the details below.

8. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at https://ledgeroptics-au.azurewebsites.net, and the effective date above reflects the latest revision.

9. Contact us

For any privacy questions, requests, or complaints, contact us at info@qadan.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).