Privacy Policy

Last updated: 6 November 2026

The short version

We read your bank statements only to convert them, we never store them, and we never sell or share your data.

What we process

Statement files you upload. They are read in the server's memory, converted, and discarded. They are never written to disk or kept in a database.
PDF passwords. Used only to open the file you upload, then discarded. Never stored.
Your converted Excel file. Kept in memory for up to 30 minutes so you can download it, then deleted automatically.
Usage counts. To enforce plan limits we store the number of pages converted, linked to a one-way hash of your IP address (free plan) or of your licence key (paid plans). We cannot turn the hash back into your IP address or key.
Visitor statistics. We count page visits with GoatCounter, which uses no cookies and does not track you across sites. It records the page, the referring website, your browser type and your country, never your name or IP address.
Payment details. Payments are handled by our payment partner Gumroad (card or PayPal). We never see or store your card details. Gumroad shares your name, email and the amount paid with us so your licence key can be sent and checked. See Gumroad's privacy policy for how they handle billing data.

AI processing

If a statement can't be read by our standard reader, and the AI reader is enabled, the file may be sent to our AI provider (Anthropic) to extract the transactions. Anthropic processes it only to return the result to us, under their commercial terms, and does not use it to train models.

Cookies

We don't use tracking or advertising cookies. If you save a licence key, it is kept in your own browser's local storage so you don't have to paste it again.

Where data is processed

Our servers are hosted by our hosting provider in the United States or European Union. Data is encrypted in transit (HTTPS).

Your rights

Because we don't keep your statements, there is usually nothing to delete. For any privacy request, including under GDPR, UK GDPR or CCPA, email statementmerge.help@gmail.com and we will reply within 30 days.

Contact

statementmerge.help@gmail.com