Privacy Policy

1. Who We Are

LedgerDock is a desktop application developed and distributed by SuperDave Lab. For privacy questions, contact us at hello@superdavelab.com.

2. What LedgerDock Does NOT Collect

The application never transmits the following to SuperDave Lab or any third party:

• The contents of your CSV, TSV, XLS, or XLSX files
• Any row, column, or cell data, including anything shown in the preview
• Generated CREATE or INSERT scripts
• File names, file paths, table names, or column names
• Database hostnames, usernames, passwords, or any other connection details
• Your import recipes, clean-up rules, or column mappings
• Usage data, analytics, crash reports, or telemetry of any kind

3. What Network Connections the App Makes

LedgerDock makes exactly two kinds of network connection, and only one of them involves us:

• Your database (direct import, on your explicit action) — When you run a direct import, the app connects to the database you configured and sends your data there. That connection goes from your machine to your server. It does not pass through us, and we have no visibility into it. If your database is on your own network, the data never leaves your network.
• Update check (once at startup, and on demand) — The app fetches a small JSON file from our server to compare version numbers. This happens once shortly after launch, and again whenever you choose Help → Check for Updates. The request carries only the HTTP headers your operating system sends automatically, such as your IP address and User-Agent. No file, table, or licence data is included, and it is never sent as part of an import.

The startup check is a single version comparison — nothing is downloaded or installed automatically, and it tells you only if a newer release exists. You can turn it off in Settings → Updates, after which the app checks only when you ask it to. There is no other background activity: LedgerDock does not poll, phone home, or contact us while you work.

The app is fully functional with no internet connection at all, including direct import to a database on your own network.

Links in the app that point to our website (Downloads, Terms, this policy) open in your normal web browser; the app itself does not fetch those pages.

4. License Key Activation

License keys are verified entirely offline, using a cryptographic signature checked against a public key compiled into the build. The app does not contact any licence server to activate, verify, or expire a key — including beta keys, whose end date is signed into the key itself rather than looked up. There is no account, no activation call, and no check-in.

The name and email you enter in the License dialog are stored locally alongside the key and are never transmitted.

5. Data Stored Locally

LedgerDock stores the following on your device only, under ~/.config/ledgerdock/ (or the equivalent per-user application data folder on Windows and macOS):

• license.key — your licence token, if activated
• settings.json — app settings such as theme and session handling
• connections.json — saved connection profiles: dialect, host, port, database name, and username. Passwords are not stored in this file.
• recipes.json — your saved import recipes
• mappings.json — remembered column mappings, keyed by table name
• session.json — a saved working session. This records the path of your source file along with its size and modification time, plus your schema edits. It does not contain a copy of the file's contents, and the session is discarded if the file has changed or moved.

Connection passwords are held in your operating system's credential store — Keychain on macOS, Credential Manager on Windows, or libsecret on Linux — under the service name LedgerDock. They are never written to the files above and never transmitted.

You can delete all of this at any time by removing that directory, and any stored passwords through your operating system's credential manager.

6. This Website

If you submit the beta request form on our site, you provide an email address, a role, and which database you work with. That form posts to our licence service and is used only to coordinate the beta programme — to reach you about access and to ask for feedback. It is not shared, not sold, and not added to a marketing list. Ask us at hello@superdavelab.com and we will delete it.

The site itself uses standard web server logs, which include IP addresses and User-Agent strings. We do not use third-party analytics scripts, advertising trackers, or cookies beyond what your browser sends automatically with any HTTP request. The checkout button loads a script from our payment processor, described below.

7. Payment Processing

Pro purchases are handled by our payment processor, Lemon Squeezy. When you buy, their privacy policy governs the handling of your payment information. SuperDave Lab receives only your name, email, and an order identifier, which are used to issue your licence key — no payment card data ever reaches us. Beta licences involve no payment and no payment processor.

8. Children's Privacy

LedgerDock is not directed at children under 13, and we do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new effective date. Because the app collects no personal data, most changes will be clarifications rather than material changes to data handling.

10. Contact

Privacy questions or requests: hello@superdavelab.com.