Ledger & Oak Investments LLC — Privacy Policy

Effective Date: October 4, 2026

This Privacy Policy describes how Ledger & Oak Investments LLC (“Ledger & Oak,” “we,” “us,” or “our”) may collect, use, protect, and disclose information in connection with our websites, business operations, digital services, and authorized third-party integrations.

1. Information We May Collect

Depending on how our services are used, we may collect or process the following categories of information.

Contact Information

This may include:

  • name;

  • email address;

  • telephone number;

  • business contact information; and

  • information submitted through forms or communications.

Business Information

We may process information relating to businesses, assets, operations, vendors, customers, investments, contracts, financial administration, or other legitimate business activities.

Connected-Service Information

Ledger & Oak may connect authorized third-party business platforms to support internal operations.

Depending on the service and authorization granted, information made available through such connections may include:

  • account or company identifiers;

  • connection status;

  • authorization information;

  • business records;

  • accounting or financial information;

  • reporting information;

  • documents;

  • transaction-related information; and

  • other information made available by the connected service.

Technical Information

We may collect technical information such as:

  • timestamps;

  • system events;

  • application or browser information;

  • error information;

  • authentication events;

  • security events; and

  • service-performance information.

2. How We Use Information

Ledger & Oak may use information to:

  • operate and administer our business;

  • authenticate authorized connections;

  • maintain authorized third-party integrations;

  • manage investments and business assets;

  • prepare reports and analyses;

  • perform financial and operational administration;

  • support business planning and decision-making;

  • maintain records;

  • monitor system security and reliability;

  • troubleshoot technical problems;

  • comply with legal, tax, accounting, contractual, and regulatory obligations;

  • prevent fraud, unauthorized access, or misuse; and

  • improve our business processes and systems.

3. Connected Business Services

Ledger & Oak may connect authorized third-party services, including accounting, financial-management, productivity, document-management, communications, and other business platforms.

Information obtained through these services is used only for authorized business, administrative, operational, reporting, analytical, security, or compliance purposes.

Access to a connected service does not transfer ownership of the underlying information to Ledger & Oak.

4. Authentication and Access Credentials

Some third-party services use authentication mechanisms such as OAuth.

Where applicable, Ledger & Oak may receive technical credentials that permit an authorized connection to remain active.

We use security controls intended to limit access to those credentials and do not intentionally publish authentication credentials or include sensitive access credentials in publicly accessible records.

5. How We May Share Information

Ledger & Oak may disclose information when reasonably necessary:

  • to service providers that support our business operations;

  • to professional advisors such as attorneys, accountants, or consultants;

  • with the authorization of the applicable individual or business;

  • to comply with law, legal process, regulatory requirements, or governmental requests;

  • to investigate suspected fraud, misuse, or security incidents;

  • to protect the rights, property, safety, or security of Ledger & Oak or others; or

  • in connection with a lawful merger, acquisition, financing, restructuring, or transfer of business assets.

We do not sell authentication credentials or connected-account financial information.

6. Service Providers

Ledger & Oak may use third-party technology and professional-service providers to support functions such as:

  • hosting;

  • communications;

  • accounting;

  • document management;

  • analytics;

  • security;

  • infrastructure; and

  • business administration.

Providers may receive information reasonably necessary to perform their authorized functions.

7. Information Security

Ledger & Oak uses administrative, technical, and organizational safeguards appropriate to the nature of the information we process.

Depending on the system, these safeguards may include:

  • access controls;

  • authentication;

  • encryption;

  • restricted credential storage;

  • environment separation;

  • software-signing controls;

  • audit records;

  • authorization boundaries;

  • monitoring; and

  • human approval for sensitive operations.

No security measure can guarantee absolute protection from every possible risk.

8. Data Retention

We retain information for as long as reasonably necessary to support the purposes described in this Privacy Policy, including legitimate business, accounting, tax, contractual, legal, security, audit, and compliance purposes.

Retention periods may vary depending on the type of information and the reason it is maintained.

Credentials associated with third-party integrations may be deleted, revoked, replaced, or rendered unusable when an authorization ends or an integration is disconnected.

9. Disconnecting Third-Party Services

Where supported, authorized users may revoke a third-party service connection through the applicable provider or through Ledger & Oak.

Following disconnection, Ledger & Oak may retain limited information where reasonably necessary for accounting, legal, audit, fraud-prevention, security, or compliance purposes.

10. Privacy Rights

Depending on applicable law and your place of residence, you may have certain rights relating to personal information, such as the right to request:

  • access;

  • correction;

  • deletion; or

  • information about how personal information is processed.

Some information may be retained where permitted or required by law.

11. Children

Ledger & Oak’s websites and business services are intended for business and adult use and are not directed toward children.

12. External Websites and Services

Our website or business systems may contain links to or interact with third-party services.

Those third parties maintain their own privacy practices, and Ledger & Oak is not responsible for their independent privacy practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy as our business, technology, integrations, or legal obligations change.

The effective date at the top identifies the current version.

14. Contact

Questions or privacy-related requests may be submitted using the contact information available at:

Ledger & Oak Investments LLC
https://www.ledgeroakinvestments.com/