Privacy Policy
Last updated: 2 September 2026
The short version
Your original PDF is processed in memory on our servers and discarded immediately — we never write the source file to disk. When you are signed in, the extracted data from your document (transactions, categories, and document metadata) is saved to your account so you can access and re-download it later. That extracted data is stored encrypted at rest, is never sold or shared for advertising, and you can delete any document — or erase everything — at any time. Documents converted anonymously (the free trial) are not saved at all.
What we store
- Account data: email address, hashed password (if you register), and Google OAuth token (if you sign in with Google).
- Converted document data (signed-in users): the extracted transactions, categories and document metadata (e.g. dates, amounts, descriptions, balances/totals), stored encrypted so you can re-download and review them. You can delete any document, or all of them, anytime from your dashboard or billing page.
- Usage & billing data: pages consumed, plan type, and payment history.
- Log data: IP address, timestamps, error messages — retained for 30 days for security and debugging.
What we never store
- Your original PDF file — it is processed in memory and discarded immediately, never written to disk.
- Card or payment details — these are handled entirely by our payment processor.
- Anything at all from an anonymous (free-trial) conversion.
Third-party processors
- AI processing: your document text is processed by our advanced AI models for extraction and categorization. Our AI providers are contractually prohibited from using your data to train models.
- Dodo Payments: handles payment processing. We share only what is necessary (email, amount) to process your transaction.
Your rights & deleting your data
You are always in control of your stored documents. Delete any single document from your dashboard, or erase all of your stored data with one click on your billing page. You can also request full account deletion by emailing hello@statementconverts.com. In line with applicable US privacy laws (including CCPA/CPRA where relevant), we process such requests within 30 days.
Cookies
We use a single session cookie for authentication (if signed in) and Vercel Analytics cookies for aggregate, privacy-preserving usage metrics. We do not use third-party advertising or tracking cookies.
Contact
Questions? Email hello@statementconverts.com.