Privacy policy
1. Scope and operator
This policy covers the Investment Ledger Web service and official clients that use the same account and ledger. A feature is covered only when it is actually offered.
The operator is SHEN PENG (シン ホウ), an individual business operator. Merit Ledger is a service brand. Request the operator’s address, phone number and other operator details at support@meritledger.org; they will be provided without delay. General enquiries: contact@meritledger.org.
2. Information we handle
Account information includes your email address, name or nickname, profile image, authentication identifiers and basic profile received from services such as Google, and linked sign-in methods. When email authentication is offered, we handle a password verification hash and information needed for verification. We do not receive your Google password.
Ledger information includes accounts, securities, balances, trades, prices, exchange rates, income, expenses, NISA or retirement records, journals, research, reviews, uploaded images and file metadata. We also handle your display language, edition, base currency, time zone, billing country and display preferences.
Purchase, support and technical information includes payment-provider customer, order and subscription identifiers, purchase status, amounts, currencies, billing country, support correspondence, IP addresses, request times and paths, browser or device details, and records needed for authentication and abuse prevention. Card details are handled on the payment provider’s pages and are not stored as ordinary ledger data.
3. Why we use information
We use information to authenticate and manage accounts; store, calculate, display and export ledger records; apply settings; send authentication emails; manage purchases and membership; respond to support requests; and operate community features.
We also use information as needed for security, abuse prevention, troubleshooting, backup and recovery, and compliance with law. We do not use private ledger records for automatic publication or investment solicitation.
4. Private ledgers and community visibility
Ledger records, personal information and private attachments are managed for the authenticated owner. Authorized personnel may handle information when needed to operate or support the service. Ledger contents are not included in public product pages or search sitemaps.
Names, text, images and replies that you choose to post in community features are visible to other users of those features. Do not post account numbers, authentication secrets or other people’s personal information. Uploaded images may contain visible personal details or embedded metadata.
5. Service providers and disclosures
Tencent Cloud provides server hosting and storage. Cloudflare provides Web delivery, DNS and support-email routing. Google provides sign-in and receives forwarded support email. Resend is involved when email authentication is offered; Stripe is involved when paid Web purchases are offered. Each provider also describes its own processing in its privacy information.
If you enter payment details directly with a payment provider or choose to visit an external service, review that service’s disclosures. Our policy is not to sell personal information or provide it for behavioral advertising. We do not disclose it for unrelated purposes unless there is a lawful basis, such as consent, a legal obligation or protection of rights.
6. Processing locations and international handling
Core ledgers and private images are stored on the Tencent Cloud server in Tokyo, Japan. Encrypted recovery backups are also kept on the server and in a separate operator-controlled location. Cloudflare delivery and Google, Resend and Stripe processing may involve the United States and other countries outside your residence. Edition and language do not change the storage location. Resend is configured to send from Tokyo, which does not mean all related processing stays in Japan.
See the privacy information of Tencent Cloud, Cloudflare, Google, Resend and Stripe for provider processing. Contact support@meritledger.org with questions about international handling and safeguards.
7. Cookies and browser storage
We use cookies for sessions and authentication flows and may store display preferences and cached public configuration in your browser. A sign-in cookie ordinarily lasts up to seven days, but sign-out or revocation can invalidate it sooner.
The current Web implementation does not embed advertising trackers or analytics tags. External authentication and payment pages may use their own cookies. Clearing browser storage can affect sign-in and preferences.
8. Retention and deletion
We retain accounts and ledger records so you can continue to store and review them. Voiding a transaction or unlinking an image from a document does not erase all underlying data or revision history.
We verify deletion or restriction requests, explain the scope and necessary handling time individually, and respond without delay under applicable law. Limited information may be retained where necessary for law, billing, disputes or abuse prevention, subject to review of that need. Backups currently do not expire automatically after a fixed number of days; recovery copies are reviewed and handled individually as part of a deletion request. We manage recovery so deleted information is not returned to ordinary use.
9. Access, correction, export and deletion requests
Settings offers export of your own records in files containing CSV, JSON or related data. Keep downloaded files secure. Export does not guarantee that the service can restore or re-import the files.
Contact support@meritledger.org for access, correction, restriction, deletion or other privacy requests. We respond according to applicable law and may verify your identity using only information needed for that purpose. Do not email passwords or verification codes. An account-deletion request and cancellation of a subscription are separate processes.
10. Security
Measures include HTTPS, per-user access controls, restricted operational permissions, password verification hashes and encrypted backups. We do not claim end-to-end encryption or guarantee prevention of every incident.
11. Younger users
The service is for individuals aged 18 or older. Contact support@meritledger.org if you believe information about an ineligible younger user has been registered.
12. Changes and contact
We will give notice of material changes in a way that explains their content and effective timing. We will seek additional consent where required.
Privacy, deletion and service support: support@meritledger.org. General contact: contact@meritledger.org. Effective date: 29 October 2026.