Privacy Policy

At BankStatementLab, we take your privacy seriously. This privacy policy explains how we collect, use, and protect your personal information when you use our bank statement conversion service.

We collect the following types of data: (a) Account information: email address, name, hashed password; (b) Source PDFs are deleted after processing. Exception: source PDFs for multi-table extractions by signed-in users may be retained for up to 7 days for quality review; (c) Payment data: billing information processed by our payment provider Stripe (we do not store card numbers; billing records are retained as required by law); (d) Usage data: IP address, browser type, pages visited, timestamps; (e) Cookies: for authentication and analytics (see Cookies section).

We use your data to: (a) Provide and improve the conversion Service; (b) Create and manage your user account; (c) Process your payments and manage billing; (d) Communicate with you regarding the Service, updates, and support; (e) Analyze Service usage to improve our features; (f) Detect and prevent fraud and abuse; (g) Comply with our legal obligations.

We never sell your personal data or use it for advertising. Processing is strictly limited to providing, securing, and operating the Service and meeting our legal obligations. Bank-statement content is processed only to perform the conversion you request. The technical operations required by the Service are governed by strict contractual confidentiality, security, and data-protection obligations. The relevant technical services and their purposes are listed on our dedicated page.

We implement robust security measures: (a) TLS 1.3 encryption for all data transmissions; (b) Passwords hashed with modern algorithms; (c) Source PDFs are deleted after processing. Exception: source PDFs for multi-table extractions by signed-in users may be retained for up to 7 days for quality review. Retained PDFs are accessible only to authorized administrators. They cannot be downloaded by users or through the public API; (d) Limited access to personal data by authorized personnel only; (e) Real and permanent deletion of transaction data when you delete an extraction. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

We use cookies for: (a) Essential cookies: maintaining your login session; (b) Analytics cookies: understanding how you use the Service (Google Analytics); (c) Preference cookies: remembering your language choices and settings. You can control cookies through your browser settings, but this may affect certain Service features.

In accordance with the General Data Protection Regulation (GDPR), you have the following rights: (a) Right of access: obtain a copy of your personal data; (b) Right to rectification: correct inaccurate data; (c) Right to erasure: request deletion of your data; (d) Right to restriction: restrict processing of your data; (e) Right to portability: receive your data in a structured format; (f) Right to object: object to processing of your data; (g) Right to withdraw consent at any time. To exercise these rights, contact us at support@bankstatementlab.com.

We retain your data for the following periods: (a) Source PDFs are deleted after processing. Exception: source PDFs for multi-table extractions by signed-in users may be retained for up to 7 days for quality review; (b) Extracted data: retained until you delete it or until your automatic deletion rule applies (configurable from 1 to 30 days, disabled by default, and initially set to 14 days when enabled); conversions performed without an account are deleted after 24 hours; (c) Account information: account access is disabled when you close the account, while the account record may be retained where necessary for security, fraud prevention, billing, or legal compliance; contact support to exercise an erasure request; (d) Billing data: retained for 7 years for tax compliance; (e) Usage logs: retained for a maximum of 12 months.

Our Service is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us immediately.

We may update this privacy policy periodically. We will notify you of significant changes by email or through a notification on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

For any questions regarding this privacy policy or your personal data, contact us: Email: support@bankstatementlab.com. We strive to respond to all requests within 30 days.