Terms of Service

Draft pending legal review. This document has not yet been reviewed by a lawyer. Bracketed placeholders mark facts that are still open decisions (see docs/legal/decisions.md in the repository). It should not be treated as final until those are resolved and a lawyer has signed off.

1. Who we are

Ledgerpost is operated by [legal entity name — pending], registered at [registered address — pending], registration number [pending], VAT number [pending, if applicable]. You can reach us at ledger.post@outlook.com.

2. What Ledgerpost is

Ledgerpost is a manual personal ledger. You type in your own transactions — income, expenses, transfers between your own wallets. Ledgerpost is not a bank, is not a payment service, does not hold or move your money, does not initiate payments, and does not connect to any bank account. There is nothing to "sync" and nothing we could get wrong on your behalf, because we never touch a real financial institution.

Nothing in Ledgerpost is financial, tax, or investment advice. Reports, totals, and forecasts are arithmetic performed on the numbers you entered — not a recommendation, and not a substitute for a professional who knows your actual situation.

3. Accounts

• You must be at least 18 years old to create an account.
• One account per person. Accounts are for your own use — don't share credentials or resell access to your account.
• You're responsible for keeping your password (and, if you turn it on, your two-factor device) secure, and for everything that happens under your account as a result of not doing so.

4. Acceptable use, including the public API

• Read access to the public API is available on every tier; write access requires a paid tier. Each tier has a daily request limit — see the pricing page for current numbers.
• Don't try to get around your tier's rate limit or write-access restriction through multiple accounts, key rotation, or any other workaround.
• Don't resell or provide bulk third-party access to your API key.
• Don't use the API (or the app) for automated bulk scraping of anything beyond your own data.

5. Data accuracy

You enter the numbers. We do arithmetic on them — totals, categorization, trend lines, forecasts. We don't independently verify anything you type in, and we don't warrant that any report, total, or forecast is accurate, complete, or fit for any particular purpose. If a number matters — for taxes, for a loan application, for anything with real consequences — verify it yourself.

6. Availability

We don't guarantee any particular uptime on any tier, and there's no service-level agreement. We do maintenance, we ship bugs sometimes, and we fix them. If uptime is critical to your use case, plan accordingly.

7. Intellectual property and your data

Ledgerpost (the software, the design, the name, the brand) is ours. The ledger data you enter is yours. We don't claim any ownership over your transactions, notes, categories, or anything else you put in.

8. Suspension and termination

We can suspend or terminate an account for violating these terms — most commonly, abuse of the API or acceptable-use rules above — and we'll tell you why when we can. You can delete your own account at any time from Settings; see /deletion for exactly what that does.

9. Limitation of liability

To the extent the law allows, Ledgerpost is provided "as is," without warranties of any kind, and we're not liable for indirect, incidental, or consequential damages arising from your use of it. Nothing in this section limits any right that consumer-protection law says can't be limited — where local law gives you a right we can't contract around, that right stands.

10. Changes to these terms

We'll bump the version number and effective date on this page whenever we change it. A material change — one that actually changes what you're agreeing to, not a typo fix — gets a heads-up: a banner in the app and an email, with a link to what changed, the next time you sign in. Continuing to use Ledgerpost after a material change means you accept the new terms; if you don't, you can export your data and delete your account before it takes effect.

11. Governing law

These terms are governed by the law of Montenegro (recommended default — pending legal confirmation, see docs/legal/decisions.md #4), without regard to conflict-of-law rules. If you're a consumer in the EU, nothing here takes away protections your home country's law gives you regardless of this clause.

12. Billing

Ledgerpost does not currently process payments. Paid tiers are shown on the pricing page for reference only — no purchase flow exists yet. The rest of this section describes how billing is intended to work once it does, so that the commitment is on the record before the first card is ever charged, not written retroactively. Nothing below is active today.

• Merchant of record. Once billing launches, purchases will be processed by Paddle, acting as merchant of record and reseller — Paddle, not Ledgerpost, is the legal seller, and Paddle handles VAT and sales tax calculation, collection, and remittance everywhere it's owed. See the refund policy for what appears on your card statement.
• Subscription term and automatic renewal. Paid subscriptions will renew automatically at the end of each billing period until cancelled. Cancelling stops future renewals; it doesn't refund the period you've already paid for — access continues until that period ends.
• Price changes. We'll give 30 days' notice before any price change takes effect, and it will only ever apply starting from your next renewal, never retroactively. If you don't want the new price, you can cancel before it takes effect.
• Failed payment. If a renewal charge fails, we'll retry it on a schedule and email you each time, with a way to fix your payment method. If every retry fails, your account moves to the Free tier — it is never deleted, and nothing in it is destroyed.
• Tier limits on downgrade. Whether from a failed payment or your own choice, going over a lower tier's limits doesn't delete anything. An API key beyond your plan's cap stops authenticating requests until you're back under the limit or upgrade again — it stays visible in your account the whole time. A wallet beyond your plan's cap stays visible and fully intact, and can no longer be set as your default wallet, but nothing about it is deleted. (There is no billing system yet to actually trigger a downgrade — this describes how the existing, already-enforced tier caps behave today, which is what any future downgrade will build on rather than replace.)
• Free tier. Provided as-is, may change with notice, and export is always available on it — same as every other tier.
• Disputes. If you file a chargeback instead of asking us for a refund, we may suspend the account associated with it while the dispute is resolved.

Full detail on refunds — including the actual withdrawal-right window — lives in the refund policy, not duplicated here.

13. Two commitments, in writing

• Downgrading your plan never deletes your data. If you go over a lower tier's limits (an extra wallet, an extra API key), the extra item goes read-only — nothing is removed.
• Export is free, on every tier, forever. You can download every transaction you've entered as a CSV at any time from Settings, at no cost, on any plan.

<a id="changes"></a>

Changelog

• 1.0.0 (2026-08-27) — first published version.