Privacy

Longtom runs on your computer. No account, no server holding your books, and nothing sent to us — including nothing about whether you use it.

Published by Ontiqo Pty Ltd (ACN 701 340 418), Daylesford, Victoria, Australia. Last updated 10 September 2026.

What stays on your machine

One folder holds the database, your documents and the backups. The console is served only to your own computer.

• Books, customers, correspondence — a local database file you can copy, export or delete.
• Credentials — a separate encrypted vault. Never in the database, the settings or the logs, so an exported database carries no secrets.
• Your mailbox — Longtom records that a message arrived, nothing more. The message stays where it is.

What goes out

• Your coding AI. Longtom runs the CLI you already have, under your subscription. What it hands over goes wherever that tool sends it, under that provider's terms. Longtom's own record of the exchange is redacted against your vault first.
• Your mail server, bank and payment provider. Using credentials you supplied.
• Country data updates. A small public file, fetched to ask whether your country's rules changed. It carries nothing about you, and it can be switched off.

What we do not do

• No telemetry, crash reporting or usage counting.
• No advertising. Nothing sold or shared.
• No cookies. The fonts come from this domain.

Filings

Longtom prepares a return and never lodges one. It does not create accounts, register anything or pay anything, and it never sends mail to a tax authority or a company registry.

Getting your data out

There is no copy anywhere else, so there is nothing to request from us. Deleting the folder deletes the lot. The ledger exports OFX and the records pack is one zip an accountant can read.

Which is also the answer to the question a privacy policy usually buries: a request to see your data, correct it or have it deleted has nothing here to reach. There is no account to close.

This page

Static files on Cloudflare Pages, which sees the request the way any host sees any request. Visitor numbers come from Cloudflare Web Analytics, which sets no cookie.

The one exception on this site is the support form, and only if you use it. What you type there is turned straight into an email to us and nothing else: no database, no form service, no CAPTCHA, and no record kept beyond the mail itself. Emailing the address above does the same thing with one fewer step.

Who to write to

support@longtom.app, or the form on the support page — anything about this policy, or anything else.

Longtom is published by Ontiqo Pty Ltd (ACN 701 340 418) of Daylesford, Victoria, Australia, if you would rather write to an address.

Which law

This policy and the use of Longtom are governed by the laws of Victoria, Australia.

If you are somewhere with its own privacy law — the GDPR, the UK's, or one of the seventy-odd others Longtom knows about — that law still applies to you and this clause does not displace it. It has very little to bite on here, which is the point of the rest of this page.

If this changes

The date at the top moves and the new version replaces this one. Longtom has no mailing list to tell you on, because it never collected an address.