Menu
Security

Connect your books with confidence

Keep control of your accounting connections, understand what data is used, and review the results. Here is how Ledgeree protects the workflow from Shopify to your books. Reviewed 18 October 2026.

Shopify

Order, fulfillment and refund data

Ledgeree cloud

Capture, accounting processing and sync records

Your configured destination

Tally Prime

Local Ledgeree Agent

Ledgeree communicates with the Ledgeree Agent, which connects to Tally's XML/HTTP interface on your network. No public Tally port is required.

Zoho Books

Authorized cloud API

Ledgeree uses your OAuth authorization to access the selected Zoho Books organization. No local relay is needed.

Ledgeree Books

Standalone cloud reports

Ledgeree stores and processes accounting data for your daybook, ledgers and exports. No external ERP connection is needed.

Connection paths shown for each mode; these are alternatives, not a claim that every store sends data to all three destinations. ERP responses and posting status also return to Ledgeree.

Does connecting Tally expose it to the internet?

No public Tally port is required. The Windows Ledgeree Agent connects outward to Ledgeree and reaches Tally over your local network. Agent setup controls are restricted to the local computer. Pairing codes are single-use and expire after 30 minutes, and disabled agents are rejected.

How is my Zoho Books connection authorized?

You authorize your own organisation through Zoho OAuth. Each connection uses a single-use authorization transaction bound to the shop that started it, and Zoho refresh credentials are encrypted before database storage. You can revoke authorization in your Zoho account.

How does Ledgeree protect access to store data?

Shopify webhook signatures are verified before processing. Protected accounting operations require server-side authorization, database access is restricted, and public API and pairing endpoints apply rate limits. The app also uses security headers and protections against spreadsheet-formula injection in supported exports.

What customer details does Ledgeree need?

Ledgeree uses shipping state and country for GST place of supply. Ordinary consumer accounting does not require the buyer's name, email, phone number or street address. For B2B orders, the buyer's GSTIN and business name are retained where required for GST reporting and party identification. See the privacy policy for the full data categories.

Can I retrieve or delete customer data?

Shopify customer-data requests produce an export for an authenticated merchant to download in the app; email notifications do not contain the export itself. Export packages expire after 30 days. Customer erasure covers identifying fields in source records, accounting snapshots and operational copies, including queued Tally payloads. A separate erasure record is retained for three years.

Does routine cleanup delete my accounting history?

No. Routine diagnostic cleanup removes eligible completed queue entries, closed errors and resolved incidents after 30 days, and specified operational audit logs after 90 days. It does not remove your books, mappings or stored reconciliation results. Uninstall, cancellation and valid deletion requests follow the separate lifecycle described in the privacy policy.

Review the output before you rely on it

Posting and reconciliation have visible outcomes, so you can follow what was captured, what reached your ERP and what needs attention. Tally users can review real vouchers in a separate test company before switching to their live books. Ledgeree Books provides cloud-hosted daybook and ledger views without an ERP connection.

Explore accounting verification or read the full privacy and retention policy.

Get help with your setup

Tell us whether you use Tally, Zoho Books or standalone Books. We can walk through the connection and the accounting output with you.

Talk to us about your setup

To report a security concern, email grievance@ledgeree.com. Please leave credentials and customer records out of your initial message.