Privacy Policy

Account data, which is your email address and a hash of your password. We never store the password itself.

Signup details, which are the plan you selected, the verification code status and the time your account was confirmed.

Source data, which is the UTM parameters and the referring page that brought you to the site, recorded at signup.

Technical data, which is your IP address and browser user agent, recorded at signup and in security logs.

Uploaded statements, which are the PDF, image and scan files you upload, together with the transactions, balances and other data extracted from them and the files you export.

Billing data, which is your subscription plan, billing period, payment status and the last four digits of the card on file. Full card numbers are handled only by the payment operator.

Support messages, which are the emails you send to support@statementsconverter.com and our replies.

To create and run your account, sign you in and verify your email address.

To convert your statements, run the balance check, apply your categorization rules and produce the exports you request.

To bill your subscription and keep the records that tax and accounting law require.

To answer support requests and send service messages, such as verification codes, receipts and notices about changes to the service.

To protect the service against abuse, fraud and unauthorized access.

To understand which pages and campaigns bring visitors who sign up, using the source data above in aggregate.

Performance of a contract, for running your account, converting statements and billing your subscription.

Legal obligation, for keeping billing and tax records.

Legitimate interests, for security, fraud prevention, service messages and understanding which pages bring signups. You can object to processing based on legitimate interests at any time.

Where we process statement data on your behalf, you are responsible for having a legal basis for uploading it.

We use a small number of service providers that process data only on our instructions and under written agreements.

A hosting provider, which runs our servers, database and encrypted file storage.

An AI model provider, which reads uploaded statements to find and extract transactions. It is not permitted to keep the content or use it to train models.

An email delivery provider, which sends verification codes, receipts and service messages.

A payment operator, which processes subscription payments and stores card data.

We do not sell personal data and we do not share it for cross-context behavioral advertising.

Some providers may process data outside the country where you live. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on adequacy decisions or standard contractual clauses.

Uploaded statements, extracted data and exports are deleted automatically 24 hours after conversion by default. On Business plans the account administrator can set a different retention period.

Files uploaded for the sample conversion on the homepage are deleted right after the conversion finishes.

Account data is kept while your account is active and deleted within 30 days after you close the account, except where we must keep it longer.

Billing records are kept for the period required by tax and accounting law.

Security logs are kept for up to 12 months.

We use only essential cookies, which are a session cookie, a security token that protects forms and a cookie that stores your preferences.

We do not use advertising cookies, tracking pixels or third-party analytics cookies, so no cookie consent banner is needed.

Uploaded statements and extracted data are never used to train or improve AI models.

Data is encrypted in transit and at rest. Access to files is limited to your account and the seats you invite. Further details are on the bank statement data security page at statementsconverter.com/security.

If the GDPR applies to you, you have the right to access your data, to correct it, to have it deleted, to restrict processing, to data portability and to object to processing based on legitimate interests.

You can also lodge a complaint with the data protection authority in the country where you live or work.

If you are a California resident, you have the right to know what personal information we collect, use and disclose, to request deletion, to correct inaccurate information and to opt out of sale or sharing.

We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information for purposes that would require a right to limit.

We will not treat you differently for exercising any of these rights.

Write to support@statementsconverter.com from the email address on your account. We may ask you to confirm your identity before acting on the request.

We answer within 30 days, or within 45 days where the CCPA applies and we tell you an extension is needed.

You can also delete files at any time inside the app.

The service is intended for businesses and professionals. It is not directed to anyone under 18, and we do not knowingly collect data from children.

We may update this policy when the service or the law changes. The date at the top shows the latest version, and material changes are announced by email to account holders.

Questions about this policy go to support@statementsconverter.com.