Security — Lulu Ledger

Bank accounts

Credit cards

Receipts

Deals

Transactions

Mileage

Read-only connections through Plaid

Plaid handles connections to supported banks and credit cards. Lulu Ledger can retrieve authorized data but cannot initiate transfers or move money.

No bank passwords stored by Lulu Ledger

Bank authentication is handled by your financial institution and Plaid. Lulu Ledger never receives or stores your bank username or password.

Encrypted in transit. MFA available.

HTTPS/TLS protects data as it travels between your device and Lulu Ledger. MFA options include authenticator apps, email codes, backup codes, and trusted devices.

Your information isn’t sold

Your data is associated with your account, is not visible to other users, and is not sold for advertising or marketing.

The Bank Connection

Read-only, in plain language.

Connecting your bank and credit card accounts reduces manual entry by bringing transactions into Lulu Ledger for review. The connection is read-only: Lulu Ledger cannot initiate transfers, withdrawals, payments, or other activity in a connected account.

Connecting an account is optional. You can also enter income and expenses manually or import supported records using CSV files.

Plaid handles the connection between Lulu Ledger and supported financial institutions.

Lulu Ledger retrieves authorized transaction data used for bookkeeping and reporting.

Lulu Ledger cannot initiate transfers, withdrawals, payments, or other money movement.

Bank authentication is handled by your financial institution and Plaid. Lulu Ledger never receives or stores your bank username or password.

Lulu Ledger stores Plaid access tokens on the server to maintain authorized connections.

You can disconnect a linked account whenever you choose.

Lulu Ledger does not display account balances. Depending on the institution and connection, Plaid may provide balance information with connected-account data. See the Privacy Policy for details about the financial information that may be received.

Your Account

Protected sign-in, encrypted transport.

Because your account contains sensitive business records, Lulu Ledger supports multi-factor authentication and uses encrypted connections to protect data while it travels between your device and the application.

MFA options include authenticator apps, email codes, backup codes, and trusted devices.

HTTPS/TLS protects data in transit between your device and Lulu Ledger.

Stripe processes subscription payments. Lulu Ledger does not store complete payment-card numbers.

Your Data

Private by design. Yours by default.

Lulu Ledger uses your personal and financial information to provide and operate the product. It is not sold or used to serve targeted advertising. Full details, including service providers and retention practices, are explained in the Privacy Policy.

Your personal information and financial data are not sold.

Your financial records are not used for targeted advertising.

Your records are associated with your account and are not visible to your broker, team, or other Lulu Ledger users.

Export supported reports and records as PDF or CSV at any time.

You may request access, correction, or deletion of your information, subject to the terms and retention requirements explained in the Privacy Policy.

Questions?

We'll give you a straight answer.

Security questions deserve specific answers. Email support@lululedger.com or review the policies below.

This page describes Lulu Ledger’s current security and privacy practices. We do not claim certifications or compliance standards we have not earned, and we will update this page as the product and its security practices evolve.

Your accounts stay yours. Your money stays put.