Security
Where your file goes, how long it stays, and what we promise not to do with it.
Your file is deleted after it is converted
- The PDF you upload, and the page images we render from it: deleted as soon as your conversion finishes. If something interrupts that — you close the tab, the job fails — an automatic sweep removes them anyway. Nothing is kept longer than 24 hours, in any case.
- The converted result: kept only so you can download it, and only until you delete it or 24 hours pass — whichever comes first. It is not kept after that, downloaded or not.
- Your account and page count: kept while your account exists. The monthly allowance is metered per person, so it needs a running count.
- Payment records: kept for as long as Stripe’s rules and tax law require.
You can delete a conversion yourself at any moment, and it goes immediately rather than waiting for the 24-hour sweep.
Your statements are never used to train any model
We do not train models on your data, we do not fine-tune on your data, and we do not hand your statements to anyone for that purpose. There is no opt-in for this buried in a settings page, because there is nothing to opt into.
The one place your statement contents leave our servers is the AI model provider that reads the pages — that step is what makes the product work. It is listed on the Privacy page along with everyone else who touches any part of your data.
In transit
Everything between your browser and us runs over HTTPS, and the same applies to the connection to the model provider. Uploads are not accepted over plain HTTP.
We never connect to your bank
There is no bank linking, no screen scraping, and no place on this site to enter your online banking credentials. If you are ever asked for them by something claiming to be us, it is not us. The only input we take is a PDF you already have.
Reporting a problem
If you find a security issue, email [email protected] and say what you found. We would much rather hear it from you first.