Privacy and data
How long your statement and results are kept
Original-file deletion starts when processing ends. Results expire after 7 days with an account, 1 day without, or when you delete them.
Last reviewed
The file you upload
Your statement goes over an encrypted connection to a private storage bucket in Amazon Web Services. It is read once by an automated process inside the operator's AWS account, which uses Amazon Bedrock to extract the transactions. Deletion is attempted when processing finishes, and a storage lifecycle rule removes anything left behind. Nothing you upload is used to train any model, by us or by AWS.
The extracted table
The result you see on screen is stored so you can come back and download it again.
- Signed in: 7 days. Your account page lists recent conversions with an Open link for each.
- Not signed in: 1 day. Keep the results page URL, as there is no list to find it from.
After that the result is eligible for asynchronous deletion by AWS. You do not have to wait: see Delete a conversion now.
Results made through the API follow the same 7-day rule.
A copy in your browser
To show the original page beside the table, the app keeps a copy of your file in your browser's own storage. It never leaves your device and is removed when you delete the conversion.
What is stored about you
With an account: your email address, your plan and how many pages you have used. If you buy something, payment goes through Dodo Payments, who send back a customer ID and the product. Your card number never reaches us. Without an account, a random identifier from AWS Cognito counts your free pages; our usage record for it expires after 30 days.
Server logs are kept for 30 days to fix problems and never contain the contents of a statement. There are no advertising or analytics trackers.
Deleting everything
The bottom of the account page has a Delete my account and data section that removes conversions and files, API keys, identity links, team seats, the profile and login. Feedback or support correspondence is retained separately. Paid access must have ended first.
The full wording is on the privacy page.