Privacy Policy

Last updated: August 12, 2026

This Privacy Policy explains how Crane X1 LLC doing business as Crane Ledger (“Crane Ledger,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our websites, APIs, dashboards, documentation, Model Context Protocol (MCP) integrations, and related services (collectively, the “Service”).

By using the Service, you acknowledge this Privacy Policy. For terms governing use of the Service, see our Terms of Service.

Summary

We collect account, billing, usage, and content data needed to run an API-first accounting platform. We do not sell personal information. We use processors (hosting, auth, payments, email) to operate the Service.

1. Who We Are

Crane Ledger is operated by Crane X1 LLC. For privacy questions, contact support@craneledger.ai.

2. Information We Collect

2.1 Information you provide

Depending on how you use the Service, this may include:

  • Account information: name, email address, authentication identifiers (for example via GitHub, Google, Apple, or email magic link)
  • Organization information: organization names, settings, roles, and related metadata
  • Billing information: billing email, payment method details processed by our payment providers, purchase history, credit balances, and invoices
  • Support communications: messages, attachments, and related ticket content you send to us
  • Customer Data you store in the Service: accounting records and related business data you choose to submit (accounts, transactions, contacts, invoices, bills, documents, and similar content)

2.2 Information collected automatically

When you access the Service, we may collect:

  • Usage and telemetry: API calls, endpoints used, timestamps, credit consumption, feature usage, error logs, and performance metrics
  • Device and network data: IP address, browser or client type, operating system, referring URLs, and approximate location derived from IP
  • Cookies and similar technologies: session and preference cookies on our websites and dashboards (see Cookies below)
  • Security signals: authentication events, rate-limit events, and indicators of suspicious activity

2.3 Information from third parties

We may receive information from:

  • Identity providers when you sign in with a third party
  • Payment processors confirming payment status
  • Service providers supporting fraud prevention, analytics, hosting, or communications

3. How We Use Information

We use information to:

  • Provide, operate, maintain, and improve the Service
  • Authenticate users and authorize API/MCP access
  • Process payments, manage credits, and prevent fraud
  • Provide customer support and respond to requests
  • Monitor reliability, diagnose issues, and secure the Service
  • Enforce our Terms of Service and investigate abuse
  • Comply with legal obligations and respond to lawful requests
  • Send transactional notices (account, security, billing). We may send product updates where permitted; you can opt out of non-essential marketing where applicable

We may use aggregated or de-identified information that cannot reasonably identify you for analytics, benchmarking, and product improvement.

4. How We Share Information

We do not sell personal information.

We may share information with:

  • Service providers / processors who help us operate the Service (for example cloud hosting, databases, authentication, payment processing, email delivery, error monitoring, and analytics), under contractual obligations to use data only for providing services to us
  • Your authorized users and integrations within organizations you control (including API keys and connected AI clients you choose to authorize)
  • Professional advisors such as lawyers, auditors, or accountants when needed
  • Authorities and other parties when required by law, legal process, or to protect rights, safety, and security
  • Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of assets

We do not control how third-party AI clients, MCP hosts, or your own downstream applications handle data after you send it to them.

5. Customer Data and Roles

If you use Crane Ledger to store business or end-customer information:

  • You determine what Customer Data to submit
  • You are responsible for having a lawful basis to process that data and for providing any required notices to your end users
  • Crane Ledger acts as a service provider / processor for Customer Data you store in the platform for your own business purposes, and as a controller for account, billing, and Service operation data we collect about you as a customer

6. Retention

We retain information for as long as needed to provide the Service, comply with legal and accounting obligations, resolve disputes, enforce agreements, and maintain security and audit trails.

When you delete data or close an account, we will delete or de-identify information within a commercially reasonable period, except where retention is required or permitted (for example backups, legal holds, fraud prevention, or financial records). Residual copies may remain in encrypted backups for a limited time.

If we discontinue the Service, we may delete Customer Data after any notice period we provide, subject to legal requirements.

7. Security

We use commercially reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure. You are responsible for protecting your credentials, API keys, and devices.

In the event of a security incident affecting your personal information, we will take appropriate steps consistent with applicable law, which may include notification where required.

For additional limitations related to security incidents and system compromises, see our Terms of Service.

8. International Transfers

We may process and store information in the United States and other countries where we or our processors operate. Those locations may have different data protection laws than your jurisdiction. Where required, we use appropriate safeguards for cross-border transfers.

9. Your Privacy Rights

Depending on your location (for example under GDPR, UK GDPR, or CCPA/CPRA), you may have rights to:

  • Access personal information we hold about you
  • Correct inaccurate information
  • Delete information
  • Export or receive a portable copy of information
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent
  • Opt out of “sale” or “sharing” of personal information if those concepts apply (we do not sell personal information)
  • Appeal a denied request where required by law

To exercise rights, email support@craneledger.ai. We may need to verify your identity. If you are an end user of a Crane Ledger customer, please contact that customer first; we may redirect your request to them when they control the relevant Customer Data.

You may also have the right to lodge a complaint with a supervisory authority.

10. Cookies and Similar Technologies

We may use cookies and similar technologies to:

  • Keep you signed in
  • Remember preferences
  • Understand usage of our websites and documentation
  • Help secure the Service

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

11. Children’s Privacy

The Service is not directed to children under 16 (or the age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. Third-Party Links and Services

The Service may link to or integrate with third-party sites and services. Their privacy practices are governed by their own policies. We are not responsible for third-party practices.

13. Do Not Track

Some browsers offer “Do Not Track” signals. There is no consistent industry standard for responding to these signals, and we do not currently respond to them in a particular way beyond what is described in this Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes may be communicated via the Service, email, or our website. Continued use after an update means you acknowledge the revised Policy.

15. Contact

Privacy questions or requests:

Crane X1 LLC d/b/a Crane Ledger

Need help?

Create a free account (GitHub, Google, Apple, or email) to access our support portal. Once signed in, use the Support tab in your dashboard to submit a support ticket — no GitHub account required. Our team typically responds within 24 hours.