Privacy

Last updated 2026-08-24

This is the complete version. For the same facts in plain language — where your statement goes, who reads it, when it is deleted — see Security.

What we store

When you convert a statement we store the PDF you uploaded, the extracted transaction data, and the Excel and CSV files we generate from it. If you have an account we also store your email address, your credit balance and a ledger of how those credits were earned and spent.

How long we keep it

Uploads, extracted data and generated spreadsheets are deleted 24 hours after the batch was created. This is enforced by a job that runs on a timer and deletes the files from disk and the rows from the database — it is not a policy we promise to follow later. After that window the conversion cannot be recovered, by you or by us.

You do not have to wait for that window. Every finished conversion carries a Delete my files button that erases the upload, the extracted transactions and both generated spreadsheets immediately, along with the database rows behind them; the download links stop working at the same moment. See Security for how it works.

Your account record and credit ledger are kept until you delete your account, because they are what your unspent credits are recorded against. Neither holds statement content: ledger entries reference a conversion by its internal identifier, never by the name of the file you uploaded.

Who else sees it

Statement pages are sent to our extraction provider to be read — as text where the PDF contains text, and as an image of the page where it is a scan. The provider receives one page at a time and nothing that identifies you: not your email address, not your IP, not which conversion the page belongs to. Payment details are handled entirely by Paddle, our payment processor and merchant of record — we never see or store card numbers, and Paddle never receives a statement. Sign-in emails are sent through Resend, which receives your email address and the link.

Cookies

We set two cookies and neither is used for advertising or tracking: a session cookie once you sign in, and a signed identifier for anonymous visitors so we can show you the conversion you just started. Both are essential to the service working.

What we do not record

Our application logs record page counts, timings and internal identifiers so we can tell whether the service is working. They deliberately do not record what was on your statement — not the transactions, not the balances, not the account number, and not the name of the file you uploaded.

Deleting your data

A single conversion can be deleted from the conversion itself, at any time, with the Delete my files button.

You can delete your account from the account page at any time. It removes your email, your ledger and every conversion attached to it immediately.