One-hour retention
Your PDF and everything extracted from it are deleted 60 minutes after upload by an automated sweep. There is no "archive" bucket and no soft delete — the object is gone.
Security & privacy
Your statements are the most sensitive file you own
So the honest position is this: we want as little of your data, for as short a time, as physically possible while still doing the job. Here is exactly what happens.
Processed in memory
Parsing happens in a short-lived worker process. The PDF is never written to disk on our infrastructure, and workers hold no state between requests.
Encrypted in transit and at rest
TLS 1.3 for every connection. The temporary object store is encrypted at rest with AES-256, with keys managed by our cloud provider’s KMS.
Passwords are never stored
A PDF password is used once, in memory, to decrypt that one document for that one request. It is not logged, not cached, and not persisted anywhere.
No training, no selling
Your financial documents are not used to train models, not shared with third parties, and not sold. They exist to produce your output and then they are deleted.
Minimal data collection
Anonymous conversion needs no email, no name and no account. We keep an IP-derived rate-limit counter and nothing else that identifies you.
The life of an uploaded file
- 1
Upload
The file travels over TLS 1.3 to a conversion worker. Size and type are validated before a single byte is parsed.
- 2
Parse
The worker extracts text and table structure entirely in memory. If the PDF is encrypted, the password you supplied decrypts it in the same process.
- 3
Hold
The extracted rows are held in a temporary encrypted store so you can review, edit and download in different formats without re-uploading.
- 4
Delete
Sixty minutes after upload, the original file and the extracted data are both purged. Downloading again after that means uploading again.
Terms, in plain language
You keep every right to the documents you upload. Uploading grants us permission to process that file for the sole purpose of returning your converted output, and for no other purpose.
The service is provided as-is. Extraction is highly accurate on supported, text-based statements, but it is a tool and not a substitute for review — which is exactly why the balance check, the confidence flags and the editable table exist. Verify figures before filing anything that matters.
Do not upload documents you are not authorised to process. Automated abuse, resale of the free tier, and attempts to circumvent rate limits will get an IP blocked.
Security questions or disclosures
Reach us at [email protected]. We acknowledge reports within one business day and never pursue good-faith researchers.
Please do not email statements or other financial documents as attachments.