Privacy Policy

1. Introduction

PuffSeal LLC, doing business as 420Ledger ("we," "us," or "our"), provides cannabis-focused accounting, bookkeeping, and tax preparation services to licensed dispensaries, cultivators, manufacturers, and multi-state operators.

This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

Effective date: May 2026
Contact: 420ledger@gmail.com

2. Information We Collect

• Business financial data provided by clients — sales reports, invoices, vendor bills, payroll records, and tax documents.
• Bank transaction data accessed via the Plaid API, with your explicit consent.
• Account information — name, email, business name, and Employer Identification Number (EIN).
• Usage data and access logs — including IP address, device, browser, timestamps, and pages viewed.

3. How We Use Your Information

• To provide bookkeeping, §280E compliance, and tax preparation services.
• To generate financial statements and reports.
• To communicate with you about your account, deliverables, and deadlines.
• We never sell or share your information with third parties for their own purposes.
• We never use your information for advertising or marketing purposes.

4. Plaid Integration

• We use Plaid to securely connect client bank accounts.
• Bank data is accessed only with your explicit authorization.
• Plaid's privacy policy applies to data collected through their service.
• Read Plaid's privacy policy at https://plaid.com/legal/.

5. Data Retention

• Client data is retained for seven (7) years per IRS requirements for tax-return preparers.
• Data is deleted within thirty (30) days of a written termination request, except where legally required to retain it.
• Plaid connections are revoked immediately upon engagement termination.

6. Data Security

• All data is encrypted in transit using TLS 1.2 or higher.
• All data is encrypted at rest.
• Multi-factor authentication is required for all accounts.
• Role-based access controls are enforced across the platform.

7. Your Rights

• Access — request a copy of the personal information we hold about you.
• Deletion — request deletion of your data, subject to legal retention requirements.
• Correction — request that we correct inaccurate information.

To exercise any of these rights, contact 420ledger@gmail.com.

8. Changes to This Policy

We will notify clients of material changes to this Privacy Policy via email. The most current version will always be posted at this URL.

9. Contact