Privacy Policy

The short version

• Your uploaded statement is deleted the moment conversion finishes — we keep the extracted transactions, never the file.
• Extracted data expires automatically: after 24 hours for guests, or after the retention period you choose (7–365 days) for account holders. You can delete it earlier at any time.
• PDF passwords are used once to unlock your file and are never stored or logged.
• Your documents and data are never used to train AI models — ours or anyone else's.
• We don't sell data. We don't show ads.

What we collect

Documents you upload. Statements are transmitted over TLS, processed to extract transaction data, and the original file is removed from storage immediately after the page images are rendered. Page images used during extraction are deleted as soon as extraction completes.

Extracted transaction data. Dates, descriptions, and amounts extracted from your statements are stored so you can edit and re-export them. They are deleted automatically at the expiry shown on your dashboard, or immediately when you delete a conversion.

Account data. If you create an account: your email address, sign-in method, plan, and page-credit history. Guests are identified only by a hashed combination of IP address and a browser-generated identifier, used solely to enforce the daily free limit.

Payment data. Payments are processed by Stripe. We never see or store card numbers; we store only your subscription status and Stripe customer reference.

How processing works

Statement pages are converted to images and read by an AI vision model (Anthropic's Claude) under API terms that prohibit training on the data. Extraction results are checked against the running balance printed on your statement. Processing happens only to provide the service you requested — no secondary use, no profiling.

Your rights (GDPR)

You can access, correct, export, or erase your data at any time: extracted data is downloadable from every conversion, deletion is self-service on the dashboard, and deleting your account removes everything immediately. For requests or questions, contact us and we will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority.

Sub-processors

• Anthropic — AI extraction (no training on data)
• Stripe — payment processing
• Hosting and storage providers for the application and database

Cookies

We use only essential cookies: your session (if signed in) and a local identifier for the guest free-page limit. No advertising or cross-site tracking cookies.