The Creatives Ledger
Privacy policy
Covers creativesledger.io. Last changed 2 November 2026.
The Creatives Ledger is run by Folklore Creative Company, on Salt Spring Island in British Columbia. It keeps the books of self-employed people: what they earn, what they spend, the receipts, the driving and the invoices.
This page says what the Ledger holds about you, and about the clients and suppliers you put into it, who else handles any of it, and what you can ask us to do with it.
Who is responsible
Sydney Woodward is responsible for the personal information The Creatives Ledger holds. Write to sydney@creativesledger.io with any question about it, to see what we hold about you, or to have it corrected or deleted.
What we collect, and why
| What | Why | Who sees it |
|---|---|---|
| Your application: your name, your craft, where you work and your address, your email address, website and social handle, and your answers to the questions | To decide on founding places and to write back to you | Us |
| Your account: your name and business name, email address, country and tax regions, and the e-Transfer and reply-to addresses your invoices carry | To sign you in and to put your name on what you send | You, and us when you ask for help |
| Your records: income, expenses, receipts (photographs, and the emails you forward with their attachments), trips with their start and end places, invoices, and the payment and bank rows you bring in | They are the ledger | You, and your accountant when you send them the tax-time export |
| Your clients' and suppliers' details: names, email addresses, phone numbers, business addresses, tax numbers, the payment details you record for a supplier, and what they fill in on a request page | To send and receive invoices and receipts for you | You, and the person each record is about |
| Support messages, meetings, and error reports (the page, the browser, the screen size and the time zone) | To help you and to fix what broke | Us |
| Visits to the public pages: which page, the site you came from, your country, phone or computer, and a scrambled number that changes every day | To know which pages are read. No IP address and no cookie is kept for this. | Us, as counts |
We do not sell personal information, and we collect only what the work needs.
The services that help us run it
Each of these holds or carries personal information on our behalf, and only what it needs to do its part.
| Service | What it does | Where |
|---|---|---|
| Supabase | Holds the database, the files and sign-in. Your password is kept only in a one-way scrambled form. | United States (California) |
| Vercel | Serves the website and runs it | United States |
| Resend | Sends the invoices, requests, accountant exports and meeting invitations, and receives the receipts you forward | United States |
| Anthropic | Reads a receipt photograph or a forwarded receipt to pull out the supplier, the amount and the date. Under its commercial terms it does not use what it reads to train its models. | United States |
| Square and Stripe | Take your clients' payments into your own account, if you connect one. We hold the connection and see that a payment happened, never the card. | Canada and the United States |
| Sentry | Receives a report when something breaks, set to leave out personal details | United States |
| Google Analytics | Counts visits to the public pages. It is not on the signed-in app or on the invoice and request pages your clients open. | United States |
| Google Maps, or OpenStreetMap | Works out the distance of a trip from its start and end places | United States, and Europe |
| Vimeo | Plays the guide videos inside the app, set not to track you | United States |
Information held or carried outside Canada is subject to the laws of the country it is in, and may be reachable by authorities there.
Cookies, analytics and advertising
Signing in sets a cookie that keeps you signed in. The app also keeps your light or dark setting, and a copy of your own records so it works without a connection, on your own device.
The public pages use Google Analytics, which sets its own cookies to tell one visit from the next. The signed-in app and the pages your clients open from an invoice or a request have no analytics and no advertising measurement of any kind.
Your clients' information
When you put a client's or a supplier's details into the Ledger, you decide what goes in and why, and we hold it on your behalf to do what you ask with it: send the invoice, take the request, keep the record. We do not contact them except through what you send, and we do not use their details for anything of our own.
If their information is ever exposed, we tell you without delay, so that you can tell them. When your account closes, their records go with yours.
Your email
When you forward a receipt to your private Ledger address, we keep the message and its attachment with the receipt it becomes, so the original is there if your accountant or a tax authority asks for it. Only you see it. We are never inside the rest of your inbox.
How long we keep it
Nothing is deleted on a timer. Your records stay as long as your account does, because tax authorities can ask for several years of them and the point of the Ledger is that they are there.
Close your account and we delete your records, files and your clients' details after giving you a copy, except anything the law requires us to keep. An application that did not become an account is kept so we can write when a place opens, and deleted when you ask.
Your choices
- Ask to see what we hold about you, and to have it corrected. Most of it you can change yourself in Settings.
- Take your records out at any time with the tax-time export, or ask us for a full copy.
- Ask us to close your account and delete what it holds.
- Ask to come off the launch updates list, and you are taken off.
We answer a request to see your information within 30 days. If you are not satisfied with how we have handled your information, you can complain to the Office of the Information and Privacy Commissioner for British Columbia.
Changes
When this policy changes, this page changes with it, and the date at the top says when. If a change affects how we use what you have already given us, we tell you first.
Written under British Columbia’s Personal Information Protection Act.