Longtom by Ontiqo

Privacy Policy

Last updated 14 October 2026

1. Scope

This policy applies to the Longtom application (Longtom) and the website at longtom.app (the Website), both provided by Ontiqo Pty Ltd (ACN 701 340 418) of Daylesford, Victoria, Australia (Ontiqo, we, us). Optional Services means the online backup and secure timestamp services described in section 4.

2. The application

Longtom runs on your computer. It has no account. It does not send telemetry, crash reports or usage counts to us.

  1. Local data. One folder on your computer holds Longtom’s database, your documents and your backups. Books, customers and correspondence are kept in a local database file that you may copy, export or delete. Longtom’s console is served only to your own computer.
  2. Credentials. Passwords and keys you give Longtom are kept in a separate encrypted vault. They are never written to the database, the settings or the logs, so an exported database carries no credentials.
  3. Mailboxes. Longtom records that a message arrived and nothing more. The message remains on your mail server.

3. Information sent to others at your direction

  1. Your coding AI. Longtom runs the command-line AI tool you have installed, under your own subscription. Information Longtom passes to that tool is sent wherever that tool sends it, under its provider’s terms. Longtom’s own record of each exchange is redacted against your vault before it is kept.
  2. Mail servers, phone providers, banks and payment providers. Longtom connects to these using credentials you supply.
  3. Country data updates. Longtom fetches a small public file to learn whether your country’s rules have changed. The request carries no information about you. You may switch these updates off.
  4. The Microsoft Store. Purchases and subscriptions are handled by the Microsoft Store under Microsoft’s privacy policy.

4. Optional Services

The Optional Services are provided through Longtom’s own service, hosted on Cloudflare. Neither is active unless you turn it on, and the service keeps no log of the content that passes through it.

  1. Online backup (a paid add-on). Your books and the documents recorded in them are encrypted on your computer before they leave it, with a key that only your recovery key opens. We hold the encrypted copies and cannot read them. They are stored in Cloudflare’s R2 storage in Oceania. To confirm that you hold the add-on, Longtom asks the Microsoft Store, which identifies you to us by an anonymous Store ID and not by your name or email address. The copies are kept until you erase them. You may erase them at any time from Settings › Backups in Longtom, including after the subscription ends.
  2. Signed PDFs with a secure timestamp (part of the subscription). Only a fingerprint of the signature is sent, never the document. Once a year Longtom has your signing key certified, which sends the public half of the key and your business name; both appear in the resulting certificate. The private key does not leave your computer.

5. Filings

Longtom prepares returns and does not lodge them. It does not create accounts, register anything or make payments, and it does not send mail to a tax authority or a company registry.

6. Advertising, sale and cookies

We do not use your information for advertising, and we do not sell or share it. The Website sets no cookies. Longtom sets one session cookie, on your own computer, when you unlock the optional app lock. It is not sent to us.

7. The Website

The Website consists of static files hosted on Cloudflare Pages. Cloudflare receives the standard information of any web request in order to deliver the Website. Visitor numbers are measured with Cloudflare Web Analytics, which sets no cookie. The Website’s fonts are served from the Website itself.

8. Support requests

Support requests made through the form at ontiqo.com/support are handled under the Ontiqo privacy policy.

9. Access, correction and deletion

Without online backup, we hold no copy of your data, and deleting Longtom’s folder deletes it entirely. With online backup, erasing the online copy from Settings › Backups removes the copy we hold. The ledger exports to CSV and OFX, and the records pack is a single archive an accountant can read. There is no account to close. Any other request about personal information may be made through the support form.

10. Applicable law

This policy and the use of Longtom are governed by the laws of Victoria, Australia. Where another privacy law applies to you, including the GDPR or the UK GDPR, you retain the rights it gives you, and this clause does not displace it.

11. Changes

We may amend this policy at any time. The version published on the Website, with the date shown above, applies and replaces earlier versions. Longtom does not collect contact details, so changes are not notified individually.