Privacy Policy

This policy explains what Statement Converter AI ("we", "us") collects when you use the converter, the Chrome extension, or this website, and what we do with it.

What we collect

Payment data. There are no accounts. When you pay, Polar collects your email and billing details on its own checkout; we receive the email, to send you the result link.

Product data. The bank statements you upload and the transactions read from them. A statement is read by Google's Gemini API.

Usage and log data. Request metadata (endpoint, timestamp, response time, status code), IP address, and product analytics on this site: pages viewed and steps taken (upload, conversion, download, checkout), measured with PostHog in the EU. Analytics keeps a random id in your browser's local storage, not in a cookie, and never sees the contents of your statements.

One cookie, for the free trial. Converting a statement sets a first-party cookie holding a random visitor id, so that the free pages are given once per visitor rather than once per statement. It holds no personal data, is not used for advertising or analytics, and clearing it simply gives you the trial again.

Data retention

The uploaded statement is stored in Cloudflare R2 only until its conversion finishes, then deleted; an upload that is never paid for is deleted within 24 hours. The converted result and the job record (file name, page count, format, email) stay so your private link keeps working. The result page has a "Delete this result" button that removes the result, the file names and the email at once, or write to us. A preview that was never paid for is deleted after 30 days. To cap free use, a salted hash of your IP address is kept with the upload for two days.

Chrome extension

The Statement Converter AI extension for Chrome sends the statements you pick (dropped in, chosen from your computer, or a PDF link you right-click) to this site's upload, the same one the converter on the site uses, and opens the result here. Everything above applies to those files. The extension itself collects nothing else: no browsing history, no page contents, no analytics. It can reach only statementconverterai.com; when you right-click a PDF on another site, Chrome asks you first whether it may read that site, and it uses that only to fetch the PDF you picked. Your chosen output format is remembered in the extension's own storage.

How we use data

• To operate the product: authenticate requests, deliver the core feature set.
• To bill correctly: usage and plan tracking.
• To keep the service reliable: aggregated, anonymized performance metrics.
• To communicate: service notices, security alerts, and — only with consent — product updates.

We do not sell personal data.

Sub-processors

Cloudflare (hosting, Workers, D1 database, R2 file storage, email), Google Gemini API (reading statements), Polar (payments) and PostHog EU (analytics). Each is bound by a data processing agreement at least as protective as this policy. Details are on the security page.

Your rights

Depending on where you're located, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to or restrict certain processing. Requests can be made at the contact below and are handled within 30 days.

Security

Data in transit is encrypted with TLS. Access to production data is limited to the people who need it to operate the service, logged, and reviewed regularly.

Changes to this policy

If we make a material change, we'll notify account holders by email and update the date at the top of this page before the change takes effect.

Contact

Questions about this policy or a data request: hello@statementconverterai.com.