Privacy Policy
The short version: your statement files are deleted within 1 hour, transaction contents never enter our database, and deleting your account removes everything instantly. Below is exactly how — written as engineering facts, not legal fog.
What happens to your PDF
- 1-hour hard deletion. Uploaded files and converted spreadsheets live in temporary storage and are physically deleted by an application-level job within 1 hour. No backup, no versioning, no "deleted items" folder — after deletion, recovery is impossible even for us.
- Downloads expire in 15 minutes. Download links are cryptographically signed and stop working after 15 minutes.
- We never store what's inside. Our database holds only task metadata (bank, page count, row count, confidence, duration). There is no column for transaction rows, account numbers, or names — the schema structurally forbids it.
- Account deletion is immediate. Deleting your account unlinks all remaining files on the spot and hard-deletes your records.
What we collect
- Account: email address, optional name, and a Google account ID if you sign in with Google.
- Usage metadata: conversion task records (timestamps, bank, counts, confidence) needed to run the service and show your history.
- Billing: handled by our payment processors (see below). We store subscription status and page-pack balances only — not your card details.
- Unrecognised statements: if your bank isn't supported yet, we keep a one-way hash and the first line of the document header (typically the bank's name) so we can prioritise which bank to support next. No transaction data. Exception: the uploaded file itself may be retained for up to 24 hours (instead of the standard 1 hour) for the sole purpose of developing a template for your bank. Access is restricted to the operator, requires separate authentication, and is limited to a 1-hour window per login. After 24 hours, these files are permanently deleted just like all others.
Who processes your data
Payments are processed by Creem and Paddle.com as Merchants of Record — your card statement may show either name depending on the purchase route. They handle payment details and sales tax; we never see your card number. Other processors: Cloudflare (CDN/WAF), Sentry (error monitoring, no file content).
Your rights (GDPR / CCPA)
- Access / portability: your account metadata is available via your account page.
- Erasure: account deletion is self-service and immediate — including files, history and billing records on our side.
- No sale of data: we do not sell or share personal data with advertisers. We have nothing sellable — that's the point of the architecture.
Contact
[email protected] — we answer privacy questions fast, because it's our product, not our compliance chore.