Privacy Policy
Your statement is none of our business
This page says exactly what we keep, for how long, and what we never touch. It's short because we keep almost nothing.
Your statement PDF: never stored
The file you upload is read in your server request's memory while your results page is built, and is destroyed the moment the page renders. It is never written to disk, never backed up, never sent to anyone else, and never used to train anything. There is no delayed deletion and no cron job cleaning up copies later, because there is no copy to clean up — deletion is instant by construction. This also means we cannot recover it for you: close the tab and it's gone.
The rows on your results page
If your plan includes export, the rows already shown on your screen (dates, amounts, merchant names — never the PDF, never account numbers) are kept in your private session so the Export and Summary buttons work. They are overwritten by your next analysis and deleted when your session expires, after at most 14 days. A nightly job on our server permanently purges expired sessions from the database.
What we never ask for
Your banking username, password, or one-time codes. Not optionally, not ever. No feature of this site connects to your bank.
Your account, if you make one
The free tier needs no account. If you buy credits or a plan, we store your email address, a hashed password, and your credit balance — that's the account. You can delete it yourself from your account page at any time, which removes it immediately. Card details go directly to the payment processor (Stripe or PayPal); they never touch our servers and we never see them.
Measurement
We run our own first-party counters: which pages get visited and which buttons get clicked, with an IP address and session key used to filter out bots. We also use Clicky, a small analytics service, to count visits — its script is served from our own domain and it sees which pages are viewed, never anything from a statement or an export. There is no Google Analytics and no advertising pixel on this site, and every script the site loads is served from our own domain. Counters are deleted after at most two years.
Messages you send us
If you write to us through the contact form we keep your email address and message so we can reply. Please don't paste statement contents into a message. The one exception is the blur tool: if we fail to read your statement, you can choose to black out your personal details in your browser and send us only the blacked-out page images so we can add support for your bank's layout. The original PDF never leaves your device, the images go only to our own inbox, and we delete them once the layout is supported.
Cookies
One session cookie (login and the export rows described above), your language choice, and a first-party visit-counting cookie set by the analytics described under Measurement. No advertising or cross-site cookies.
Sharing
We don't sell, rent, or share personal information with anyone, except payment processors to process your payment, or where the law compels us.
Changes
If this policy changes, the change appears on this page with a new date. The three promises above — no bank logins, no stored statements, no advertising trackers — are the product; a version of this site that breaks them is not this site.
Who is responsible for your data
The company named above operates this site and is the controller of the personal data described on this page. “We”, “us” and “our” mean that company throughout.
Last updated: September 2026