Privacy policy

Account data

Email address, name if you provide one, password hash, and sign-in provider identifiers if you use Google sign-in. Needed to operate your account and to send transactional email (verification, password reset, conversion notices).

Uploaded documents

The PDF statements you upload and the transactions extracted from them, which may contain personal and financial data about you and third parties. Processed solely to provide the conversion you requested. Account numbers are stored masked.

Usage and billing data

Page counts, conversion metadata (status, formats, timings, confidence), plan and invoice history. Stripe processes payment details; we store Stripe identifiers, not card numbers.

Technical data

IP address, user agent and request logs for security, rate limiting and troubleshooting. Logs are redacted of document content.

Support correspondence

What you send us by email.

Where the GDPR or UK GDPR applies: performance of a contract (providing the service you signed up for), legitimate interests (security, fraud prevention, service improvement using aggregate metrics), legal obligation (tax and accounting records for invoices), and consent where we ask for it (sharing a failed conversion with engineering).

Original PDFs

Deleted 24 hours after processing by default; uploads by visitors without an account after 60 minutes.

Exports and extracted transactions

Deleted 7 days after conversion, or 10 minutes after your first download when your organisation enables Purge on download.

Conversion history

Technical metadata (bank, page count, confidence, dates) until you delete the conversion, or your account, whichever is first. Delete now removes a conversion immediately.

Account and billing records

For the life of the account plus the period required for tax and accounting law.

Logs

Rotated on a short schedule; they do not contain document content.

Only the providers needed to run the service, listed with their role on the subprocessors page. We do not sell personal data, do not use your documents to train models, and do not share them with third parties except as listed there or when required by law.

Extraction is deterministic software. If the optional AI-assisted column mapping is enabled in this deployment (stated on the subprocessors page), a small redacted sample of header and cell text may be sent to the AI provider to resolve ambiguous column meanings. Full documents, account numbers and balances are not sent. No decisions with legal effect are made about you.

Depending on where you live you may have rights to access, correct, export, restrict or delete your personal data, and to object to certain processing. Most of these are self-service: download exports, delete conversions, and delete your account from settings. For anything else, email [email protected]. You can also complain to your data protection authority.

Statements contain names and amounts relating to other people (payees, employers, counterparties). By uploading a statement you confirm you are entitled to process it. If you act for clients, the data processing terms apply.

We use strictly necessary cookies: a session cookie once you sign in and a short-lived cookie that ties an anonymous upload to your browser until you create an account. Analytics, if enabled in this deployment, is listed on the subprocessors page. We do not use advertising cookies.

Material changes are announced on the changelog and, for account holders, by email.