Privacy policy

Hosted processing

Your file is processed by the hosted service, not in your browser and not on your device. No account, email or payment is required for the first complete daily conversion. After that conversion, you may create an optional verified-email account for additional allowance and access to jobs that are still live. Creating an account is never required to review or export the first result.

What you upload

A single bank-statement PDF, up to 10 MiB and 20 pages, for one job. The service supports digital (native) bank-statement PDFs. Scanned or photographed statements, mixed scanned/native documents, credit-card statements, and other documents are not supported in this version and should not be uploaded.

What is extracted

The transactions and balances printed on the statement — dates, descriptions, debit and credit amounts, and running balance where present — are read into a structured table so you can review them and export CSV or Excel. The original PDF is never altered, and no transaction is invented.

What is stored, and for how long

While a job is active, the uploaded PDF, the source view, the extracted data and your edits, and any export you generate are stored privately and scoped to that one job session. If you claim a live job through an account, the account can access it only until the same deletion or expiry lifecycle ends. An account does not create durable statement history. When you delete a job, its uploaded file, source view, extracted data, and exports are removed from the service and cannot be recovered.

Optional account information

If you choose to create an account, the service processes your email address, a password credential hash when you set a password, session and verification records, and optional authenticator and backup-code records when you enable two-factor authentication. It also records your content-free allowance usage and which still-live jobs your account may access. Account records are not used as statement storage.

Transactional email

Resend processes your email address and the transactional message needed to verify your address, send a magic sign-in link, reset a password, verify deletion, or notify you about account security. These messages do not contain statement contents, filenames, job IDs, balances, or plan state.

Account deletion and anti-abuse record

Deleting an account first deletes every still-live job available to that account. The service then removes the account email, credentials, sessions, verification records, and two-factor records. It retains content-free allowance records and a non-readable value derived from the email address. That retained value does not contain the email address and is used only to prevent the one-time signup reward being claimed repeatedly.

Jobs are also configured to expire automatically. We do not yet publish a precise expiry window on this page; it is added once the production expiry behaviour is operationally verified. Until then, you can delete a completed job yourself at any time from the review screen — that is the deletion route during the current launch period.

Logs and analytics

Operational logs record safe technical metadata only — such as a request category, a non-identifying correlation ID, timing, and coarse size buckets. The contents of your statement, account numbers, names, descriptions, and amounts are not written to logs or analytics. Job, review, and export routes are served without third-party behavioural analytics or trackers.

Sharing and sale of data

StatementStudio does not sell your data or the contents of your statements. Hosted processing relies on infrastructure providers for compute, private storage, database operation, and transactional email. They handle data only to provide those services.

Current limits

We do not publish a precise retention window, a security certification, or a model-use or data-handling guarantee for extraction providers on this page. Those facts will be added only when they are ready to state plainly.

Deletion and questions

The fastest way to remove a statement is to delete the job from the review screen. See Security for the technical controls, and Terms for the conditions of use during the current launch period.