Privacy Policy

Last updated: November 10, 2026

This policy explains what we collect when you use bankstatementsheets.com, what we deliberately do not store, and the choices you have.

The short version

Your bank statement PDF is parsed in the server's memory and discarded the moment your Excel or CSV file is generated. We do not write statement files to disk, we do not upload them to object storage, and we do not keep parsed transaction rows. There is no statement archive to breach, subpoena or sell, because no archive exists.

What we collect

For anonymous use (no account). When you convert a statement without signing in, we record a one-way hash of your IP address and a daily counter, so the free daily quota can be enforced. The hash cannot be reversed to your IP, and rows older than the current day serve no purpose.

For registered accounts. We store your email address, an authentication identifier, and payment records created by our payment processor (Stripe). We store the credits you purchased and how many you have used.

Conversion telemetry. Each conversion records: whether it succeeded, an error code when it failed, the PDF's page count, the number of rows extracted, how long parsing took, and which quota was charged. This is operational data for keeping the service healthy. It does not include statement contents, transaction rows, file names of lasting value, or your PDF.

What we never store. The statement PDF, the password you supply to open an encrypted PDF, the parsed transactions, the generated Excel or CSV file. All of these exist only in memory for the duration of a single request.

Payments

Payments are processed by Stripe. Card numbers and bank details go directly to Stripe and never reach our servers. We receive a payment record (amount, product, status) for order history and support.

Cookies

We use a small number of functional cookies: your session when signed in, your theme preference, and, with your consent where required, an analytics cookie. No advertising cookies are set by us.

Analytics

When enabled, we use privacy-respecting, aggregate analytics (page views, referrers). Statement contents are never part of analytics events.

Data retention

• Quota counters: current day plus a short window, then they serve no purpose.
• Conversion telemetry: retained in aggregate for service health.
• Account and order records: retained while your account exists.
• Statements, passwords, parsed rows: never retained.

Your choices

You may request export or deletion of your account data by writing to hello@bankstatementsheets.com from the address on the account. Deleting the account removes the email, authentication record and order history. Conversion telemetry rows are not personal data after account deletion because they no longer link to any person.

Changes

Material changes to this policy will be posted here with an updated date. Continued use after a change constitutes acceptance.

Contact

Questions: hello@bankstatementsheets.com