What Ledgitify accesses in Xero

Ledgitify requests the minimum permissions it needs to build your budget reports, and every one of them is read-only. Ledgitify never creates, edits, voids, or deletes anything in your Xero organisation.

Ledgitify makes no changes in Xero. There is no scenario in which connecting Ledgitify alters your accounts, invoices, contacts, or journals. It only reads.

Identity permissions

Permission	What it’s for
`openid`, `profile`, `email`	Confirms who you are and pre-fills your name and email when you sign up with Xero.
`offline_access`	Lets Ledgitify refresh its own access securely in the background so you don’t have to reconnect every hour.

Accounting permissions (all read-only)

Permission	What it reads	Why Ledgitify needs it
`accounting.banktransactions.read`	Bank transactions (money spent and received)	The core cash movements you allocate to budget lines.
`accounting.invoices.read`	Bills (money owed) and sales invoices (money owing to you)	Expense and revenue tracking against your budget.
`accounting.manualjournals.read`	Manual journals	Non-cash items such as depreciation, accruals, and in-kind contributions.
`accounting.settings.read`	Chart of accounts, tracking categories, and your organisation’s base currency	To label transactions correctly and, optionally, pre-filter by tracking category.
`accounting.contacts.read`	Contacts	So each transaction shows its payee, supplier, or funder.

What Ledgitify does not request

No write access of any kind. There is no .write scope in the list above.
No payroll access by default. Payroll is a future feature and is only requested once separately approved, so payroll data is not accessed unless you explicitly enable it.

How your access is stored and protected

Ledgitify stores a Xero access token, never your Xero password.
Tokens are refreshed automatically before they expire (Xero access tokens last 60 minutes).
If you disconnect, or revoke access from within Xero, Ledgitify detects it, stops syncing, and clears the stored token. See Disconnecting Xero.

​Identity permissions

​Accounting permissions (all read-only)

​What Ledgitify does not request

​How your access is stored and protected

Identity permissions

Accounting permissions (all read-only)

What Ledgitify does not request

How your access is stored and protected