Privacy

What we process

• The statement file you upload, held on disk only long enough to convert or analyze it.
• Generated Excel and CSV files, available for download from this browser.
• An anonymous session cookie (bsa_user) so this browser can see its own conversion history and downloads. It is not tied to your name or email.
• If you unlock a password-protected PDF, the password is used in memory only and never stored.
• Your account email and a salted, hashed password — never the password itself. Logging in sets a session cookie (bsa_session) so your history follows you across devices. Write to us any time to delete your account and its history.
• Your IP address, used to enforce monthly analyzer quotas and abuse limits.

How long files are kept

Uploaded statements and generated files are deleted automatically after 24 hours.

Optional AI check

A verification pass may send extracted statement text and related aggregates to our AI provider (currently Gemini 2.5 Flash-Lite, or OpenRouter when configured) to correct extraction mistakes, categorize hard rows, write a short credit memo when figures show pressure, and answer open-ended chat. Exact totals stay computed in our code. Digital statements that already reconcile skip the transcription pass. We do not sell statement data.

What we do not do

• No card details on our servers. Checkout is processed by our merchant of record, Dodo Payments (or invoice), and we never see or store card numbers.
• No advertising trackers on this site.
• No sharing of your statements with third parties except the AI provider above.