Data Processing Agreement

This DPA supplements the Terms of Service when personal data is processed through Statement Converter AI on a customer's behalf. Where this document and the Terms disagree on data processing, this document controls.

Roles

For data submitted to the product, you are the controller andStatement Converter AI is the processor. We process data solely to provide the service you requested and for no other purpose.

Subject matter and duration

Converting uploaded bank statements into transaction files. An upload is kept until its conversion finishes (24 hours at most if unpaid); results last until you ask for deletion, as described in the Privacy Policy.

Nature and purpose of processing

• [List the concrete processing steps: receiving data, transforming it, storing a result, notifying via webhook, etc.]

Categories of data subjects and data

[Describe who typically appears in the data — usually the customer's own customers, employees, or counterparties — and what categories of personal data are typically involved.]

Sub-processors

We use a limited set of infrastructure sub-processors for compute, storage, and email delivery, each under a data processing agreement matching or exceeding these terms. We'll give notice of a new sub-processor with material access to customer data, and you may object on reasonable data-protection grounds.

Security measures

• Encryption in transit (TLS) for every request.
• Access to production systems is limited, logged, and reviewed on a regular schedule.
• Uploads are deleted automatically when the conversion finishes; results are reachable only through a long random link.

Assisting with data subject rights

We rely on you to route rights requests to us for the underlying data; we'll assist promptly with access, deletion, or export requests you forward.

International transfers

[Describe where data is processed and, if you support region selection or data residency guarantees, state them here.]

Audit

On reasonable notice, we'll provide the information necessary to demonstrate compliance with this DPA, including responding to a security questionnaire or making a completed audit report available.

Contact

For a countersigned copy of this DPA or a Standard Contractual Clauses annex: hello@statementconverterai.com.