Privacy notice

Operator: Adam Abukhater, an Ohio sole proprietor operating PursuitLedger. Operator location: Ohio, United States. Contact: support@pursuitledger.com.

What this notice covers

This notice explains the information handled by the independently hosted PursuitLedger website and PDF analysis service.

Information used by the service

• Accounts: your email address, optional name, password hash, verification status and sign-in records. Authentication uses your password to check access; the stored credential is a hash. Email verification and password recovery require temporary codes and delivery records. Account security records include sessions, refresh tokens and abuse-prevention identifiers and attempt metadata.
• Business profile: your service area, labor cost, cleaning production rate, overhead and target margin. These inputs inform your cost and profit estimates.
• Documents and reviews: uploaded PDFs, file names and metadata, analysis titles, findings, estimates, citations, status and usage history. PDFs may contain personal information about people named in the documents. Saved analyses include a snapshot of the profile inputs used for that review; changing your current profile does not rewrite previous reviews.
• Billing: payment-provider customer and subscription identifiers, checkout references, subscription status, billing periods, cancellation details and analysis allowance. Stripe collects payment details through its hosted checkout and billing portal. PursuitLedger's application database does not store complete payment-card numbers or card security codes.
• Support: your email address, message content and any information you choose to send us. Please do not email passwords, verification codes or payment-card numbers. If you call the configured AI support line, the phone-support provider also handles caller information, information you give it, recordings, transcripts and summaries. The approved greeting identifies the AI receptionist and says the call may be recorded. Email support is an alternative contact method.
• Technical information: hosting and service providers may process connection, request and device information to serve the website and protect their services. The application also keeps operational and error records needed to diagnose failures, verify subscriptions and prevent abuse.

How information is used

We use this information to create and protect accounts, deliver verification and recovery messages, save business profiles and documents, generate and display reviews, provide source citations, process subscriptions, enforce the paid analysis allowance, respond to support requests and maintain the service.

Providers involved

• Netlify hosts the independent customer application. Vercel hosts a separate protected staging deployment.
• Convex runs the application backend, account system, database and PDF storage.
• OpenAI processes the PDFs selected for analysis, including their file names, together with the profile inputs needed for the review. Full PDF contents are sent for this purpose, not just a document link or an already-redacted summary.
• Stripe handles checkout, payments and subscription management. We provide the account email and identifiers needed to associate payment with the right account.
• Resend delivers account verification and recovery emails, including the recipient address and temporary code in the email.
• Zoho Mail handles messages sent to and from our support mailbox.
• Smith.ai provides the AI phone-support line and handles caller information, recordings, transcripts and summaries. Email support is also available. No unlimited AI-answering promise is made.
• Backblaze B2 stores encrypted recovery snapshots and a separate deletion journal. The content-decryption key is retained separately by the operator, outside the hosted application and backup worker.

When you import a public PDF link, the backend requests it from the source website. That website receives the request and may record it under its own practices.

AI processing

The analysis request disables OpenAI's optional stored-response retrieval. This does not mean that the provider retains no data: separate safety/abuse monitoring and documented exceptions can apply. See OpenAI's data controls: https://developers.openai.com/api/docs/guides/your-data

Cookies and analytics

The customer application uses authentication cookies and temporary browser state to maintain sign-in. Blocking necessary storage can prevent account access. The public marketing page uses scripts for navigation and its fictional sample. Optional application analytics are currently disabled. Hosting and operational logs described in this notice are separate from analytics.

Storage and retention

We retain saved reviews and their attached PDFs so that you can reopen them. Canceling a subscription stops future renewals and retains saved reviews; it does not delete the account, PDFs, profile or billing history. Documents attached to a draft or failed analysis are also saved. The current service has no automatic deletion schedule for these attached documents or saved analyses. Our policy is to keep the account, profile, attached PDFs and analyses after cancellation until the customer makes a verified deletion request. A verified request will be handled under the deletion procedure below; billing records and backup copies may have separate justified retention. For the encrypted backup service, we retain recovery snapshots for seven days and always keep at least the two newest verified recovery points. After a new backup succeeds, older snapshots and encrypted PDFs no longer used by retained snapshots will be removed. A restored account must still honor a confirmed deletion request recorded in the separate deletion journal. The journal retains minimal deletion receipts to prevent deleted content from reappearing during recovery. These receipts have no automatic purge schedule. We keep email sent to support@pursuitledger.com while needed to resolve your request and for up to 12 months afterward, then remove it from the active mailbox unless a billing dispute or law requires longer retention. Zoho may retain deleted mail temporarily under its recovery and deletion schedule. This rule concerns the support mailbox, not your saved account content. Smith.ai's AI Receptionist documentation states that call recordings and transcripts are kept on its system for 90 days: https://smithaivoiceassistant.freshdesk.com/support/solutions/articles/151000200039-call-recording-transcription Other provider-held caller information, summaries and messages follow the provider's practices; the 90-day statement does not establish their expiry. Copies delivered to our support mailbox follow the support-email rule above. Deleting an application account does not automatically erase these provider records. Stripe billing history and provider security/delivery logs can also remain under the providers' retention and legal requirements.

If you confirm deletion during an already-paid month, we will stop future renewals and end your access when the deletion is performed. The remaining paid-through access will not remain available after deletion. Refund requests remain individually reviewed under the service terms.

New uploads registered by the current service that finish but are never attached to an analysis become eligible for automated cleanup after 24 hours. Cleanup runs periodically; this is not a promise that every copy disappears exactly at that time. This cleanup does not apply to attached files. We retain account-associated authentication records while the account exists, except records removed through sign-out, replacement or normal cleanup. Expired codes and sessions no longer authorize access but may remain stored; there is no general timed purge of all authentication records. The verified account-deletion procedure removes its associated authentication records. Provider-held logs are separate and are not erased by that procedure. Expiration of a sign-in or verification code is not a promise that all related security records have been erased. A hashed recipient identifier used to limit verification and recovery email requests becomes eligible for cleanup after two hours; cleanup runs periodically in bounded batches, so that is not an exact deletion deadline.

Your requests

You can manage billing from your account and update your business profile while you have active paid access. Contact support@pursuitledger.com to request access, correction or deletion of your personal information. We need to verify account ownership before disclosing or changing private records. We will not ask for your password, verification code or full card number by email. Rights and lawful exceptions depend on the law that applies.

Security and location

The service uses authentication and server-side ownership checks to restrict private account, billing and document access. No service can guarantee absolute security. Upload only information you are authorized to share for processing by the providers described here. The application backend is in US East (Northern Virginia); the analysis provider uses Global residency. Provider processing and support may occur in other locations. We do not promise that every provider stores data in one country.

Changes

An approved update to this notice will identify its effective date. Material changes will be communicated as required by applicable law.