Privacy Policy
Your statement is none of our business
This page says exactly what we keep, for how long, and what we never touch. It's short because we keep almost nothing.
Your statement PDF: never stored
The file you upload is read in your server request's memory while your results page is built, and is destroyed the moment the page renders. It is never written to disk, never backed up, never sent to anyone else, and never used to train anything. There is no delayed deletion and no cron job cleaning up copies later, because there is no copy to clean up — deletion is instant by construction. This also means we cannot recover it for you: close the tab and it's gone.
The rows on your results page
If your plan includes export, the rows already shown on your screen (dates, amounts, merchant names — never the PDF, never account numbers) are kept in your private session so the Export and Summary buttons work. They are overwritten by your next analysis and deleted when your session expires, after at most 14 days. A nightly job on our server permanently purges expired sessions from the database.
What we never ask for
Your banking username, password, or one-time codes. Not optionally, not ever. No feature of this site connects to your bank.
Your account, if you make one
The free tier needs no account. If you buy credits or a plan, we store your email address, a hashed password, and your credit balance — that's the account. You can delete it yourself from your account page at any time, which removes it immediately. Card details go directly to the payment processor (Stripe or PayPal); they never touch our servers and we never see them.
Measurement
We run our own first-party counters: which pages get visited and which buttons get clicked, with an IP address and session key used to filter out bots. These counters never contain anything from a statement. There is no Google Analytics, no advertising pixel, no third-party tracker of any kind on this site, and every script the site loads is served from our own domain. Counters are deleted after at most two years.
Messages you send us
If you write to us through the contact form we keep your email address and message so we can reply. Please don't paste statement contents into a message.
Cookies
One session cookie (login and the export rows described above) and your language choice. No advertising or cross-site cookies.
Sharing
We don't sell, rent, or share personal information with anyone, except payment processors to process your payment, or where the law compels us.
Changes
If this policy changes, the change appears on this page with a new date. The three promises above — no bank logins, no stored statements, no third-party trackers — are the product; a version of this site that breaks them is not this site.
Last updated: July 2026