Legal

Website Privacy Notice

Effective October 6, 2026

This notice explains what the personnelledger.com website collects, how we use it, and who else receives it. The website is operated by MortonApps LLC, a California limited liability company (“we,” “us,” or “our”). For questions or requests, email [email protected].

What we collect

Visits. When you visit, our hosting provider, Cloudflare, receives basic technical information, such as your IP address, browser type, the pages you request, and when, and uses it to deliver and protect the site. Our own services that the site uses, such as our form service, also keep short-lived request logs that can include your IP address and approximate location, and these logs are deleted within 7 days. We use Cloudflare Web Analytics, which sets no cookies and gives us aggregate visit data, such as pages viewed, referring websites, countries, and browser and device types. We do not use it to identify individual visitors.

How you found us. A small script of ours, loaded from our company website mortonapps.com, keeps a note in your browser’s local storage, not a cookie, of how you first arrived: the first page you visited and when, the address of the page that sent you (if any), and any campaign tags in the link you followed. The note is ignored after 30 days. It leaves your browser only if you send our contact form, which includes it, or click or tap a phone number or email link on our site. For a click or tap, we receive the page, the note, and your approximate location (country and state), without your name or contact details.

The contact form. When you send our contact form, we receive what you enter (your name, email address, organization, and message), the address of the page you sent it from, the note of how you arrived, your approximate location (country and state), your browser and device type, and a scrambled form of your IP address that helps us block spam. If our script did not load, the form keeps the same kind of note itself. The form is run by Morton Forms, our own form service at forms.mortonapps.com, which records your message and emails it to our business inbox. The contact page also runs Cloudflare Turnstile, a bot check that receives your IP address and technical details about your browser and device when the page loads, whether or not you send the form, under Cloudflare’s own privacy terms.

Emails you send us. If you email us, we receive your message, your email address, and anything else you include. Please do not send us patient information or sensitive staff details, such as license numbers or health or background check results, by form or email.

The free checklist tool. Our personnel file checklist runs entirely in your browser. Nothing you choose or type in it is sent to us. Your browser remembers your last choices, including any organization name you typed, on your device, and the tool’s “Clear choices” button removes them.

How we use it

To reply to you, and to follow up with you about Personnel Ledger and our other products and services. You can ask us to stop at any time.
To learn which pages, websites, and campaigns bring us visitors and inquiries.
To run, protect, and improve the site, and block spam and abuse.
To keep business records, comply with the law, and protect our rights and the rights of others, including in a dispute or legal claim.

Apart from a sale or reorganization of our business, described below, we do not sell personal information for money or share it for advertising, and there are no ads on this website. Anthropic may use what we send it for its own purposes (see below). The main providers that help us run the website and our business are:

Cloudflare: hosting for this site and our form service; the databases that keep contact-form messages and our records of how visitors found us, and backup copies of those databases; the forwarding of email sent to our addresses; Cloudflare Web Analytics; and the Turnstile bot check.
Microsoft: our business email (Microsoft 365), which receives and keeps the emails you send us and the notices of contact-form messages.
Amazon Web Services (AWS): Amazon SES, which delivers the contact-form notices to our inbox, and Amazon S3, which holds backups of our databases.
Anthropic, PBC: AI tools we use to help operate and support our business. They may process what you send us through the contact form or by email, and our records of how visitors found us. We use them under Anthropic’s consumer terms, not a business agreement, and we have no data processing agreement with Anthropic. The setting that lets Anthropic train its models on our sessions is turned off. Its consumer terms still let it use what we send for its own purposes, including improving its services, safety review, and legal compliance, and let it train its models on content its systems flag for safety review, which it can keep for up to 2 years, and on any feedback we send it, which it can keep for up to 5 years (United States and other countries).

We may also disclose information:

to people who work for or with us, such as contractors;
through the everyday tools we use to read, track, and follow up on messages, such as messaging (Telegram), task, and file-backup services (Google), which may keep copies;
when the law requires it, such as to comply with a valid subpoena or court order;
when we believe in good faith that it is needed to protect the rights, property, or safety of MortonApps LLC, our customers, or others, or to prevent fraud, spam, or abuse;
in confidence to our lawyers, accountants, insurers, and security investigators, including to bring, respond to, or defend a legal claim or to respond to a security incident; and
to a buyer, successor, or affiliate, and in confidence to a prospective buyer or investor and their advisers, if MortonApps LLC or any part of its business is, or may be, merged, acquired, sold, financed, transferred to an affiliate, reorganized, or wound down.

How long we keep it

Contact-form messages, emails, and our records of how visitors found us are kept as business records for as long as they help us answer you, follow up, keep a record of our dealings with you, and see which pages and campaigns bring us inquiries, and longer when we need them for a legal, tax, or security reason. If you ask, we will delete or anonymize the messages and records we can connect to you, except what we need or are allowed to keep for a legal, tax, accounting, or security reason, for a possible or actual dispute or legal claim, or to record your request and any request not to contact you. Copies in our backups are deleted as those backups expire, which we schedule for no later than 14 months after each backup is made; an interruption in a backup job can delay this. Copies Anthropic keeps under its own terms, described above, are outside our control.
The notes in your browser (how you found us, and your checklist choices) stay on your device until you clear them.

Cookies and tracking

Our website uses no tracking or advertising cookies; the visit counts and notes described above work without them. Our site does not respond to browser Do Not Track signals or similar browser signals. We do not track you across other websites, and we do not use advertising networks. Cloudflare provides services to many websites, so it may receive your IP address and browser details on other sites too, and it handles that information under its own privacy terms.

Your rights and choices

You can ask us what personal information we hold about you, and ask us to correct or delete it, by emailing [email protected]. If the California Consumer Privacy Act applies to us, it also gives California residents the right to know what personal information we collect, use, and disclose, and to access, correct, or delete it. We may ask you to confirm a request from the email address it concerns, and we may decline a request we cannot confirm or that the law lets us refuse. We do not search or change backups to answer a request. For a message or record of something you sent us, we may add your correction rather than change the original. We reply to every request we receive and never penalize anyone for making one.

Children

This website is for businesses and is not directed at children under 16. We do not knowingly collect information from children under 16.

Changes to this notice

If we change this notice, we will post the new version here and update the effective date. Unless the law requires your consent for a change, a new version applies from its effective date to information we already hold.