Your statement stays on your device

Local financial data

PDF contents, passwords, account numbers, filenames and transactions are processed in your browser. They are not uploaded to our servers, Stripe or an AI service. Clear files, sign out or close the tab to discard current results. Optional saved work is separate.

Account and service records

Supabase stores account email and authentication details, display name, consent, plan, page credits and export receipts. Receipts contain a user-specific result hash, bank, page count and export date, not statement contents. Support forms store the contact details and message you submit.

Stripe receives account email and a user reference for billing. Payment details are entered directly on Stripe. Our database stores customer, subscription, invoice, purchase and payment-status references.

Analytics are optional and contain service events, bank and parser version and a session identifier, without statement contents or session replay. Hosting and authentication providers may retain their own technical request logs.

Optional local saved work

Pro and Firm users can opt in to saving transaction results and client labels in this browser’s IndexedDB. Original PDFs and passwords are not saved. The app does not additionally encrypt saved results; other people with access to your browser profile may be able to read them. Delete individual saved jobs or clear local work from your account. Browser data clearing can permanently remove them.

Retention and requests

Account and export records remain until account deletion. Raw analytics are retained for up to 90 days and closed support requests for up to 180 days. You can disable analytics, clear local work and request account deletion from your account.

Subscriptions must have ended and no checkout may be pending before account deletion. Deleting the app account does not itself delete payment records held by Stripe under its own obligations. Provider backups may retain data until they expire. Contact support for other privacy requests; do not include sensitive financial documents.