Last updated 28 August 2026
Privacy policy
This page describes how this Balancero instance handles information. Balancero is bookkeeping software that stores your books on the machine that runs the app (for example a Railway volume), not in a shared cloud ledger we operate for every customer.
What we store
Your account email, name, role, and password and PIN hashes. The books you enter: accounts, transactions, customers, documents, receipts and other uploads, employees, and settings. A signed-in session cookie so you stay logged in until idle timeout.
Where it lives
Data is written to SQLite and an uploads folder on this host (data/ or LEDGER_DATA_DIR). The operator of this machine can back up or restore that disk. We do not send your books to a third-party analytics product.
If mail is configured, confirmation codes, password resets, approval notices, and document emails are sent through Resend or SMTP. Those providers see the recipient address and the message content.
Receipt scanning
If the operator set a Gemini or OpenAI key, a receipt photo or card-list screenshot you scan may be sent to that API so the app can suggest lines. Turn those keys off if you do not want images to leave this host.
Cookies
We use an httpOnly session cookie, plus locale and theme preferences. There are no advertising or third-party analytics cookies.
Your copies and the operator
You can download a JSON backup of your own books in Settings. The operator listed in LEDGER_OPERATOR_EMAILS can download or replace the whole database for this machine. Staff passwords are not included in a JSON backup; restoring a backup without hashes requires those employees to set a new password.
Questions
Contact the person who runs this instance — the operator email configured on the server.