Privacy built around short retention

Information processed

When you request a conversion, the service processes the PDF you upload, technical file metadata, extracted transaction data, validation results, the output formats you request, and generated download files. The service also records operational data needed to enforce usage limits, prevent duplicate abuse, track job status, diagnose failures, and verify scheduled deletion. Anonymous visitors receive a signed first-party identifier cookie for allowance enforcement. Signed-in customers provide account and session information through Clerk. Paid customers provide billing information to Stripe; GetBankStatement does not need to store complete payment-card details.

Basic website analytics may record page views and technical request information such as browser type, approximate location, referring page, and network information. Support emails contain the information a sender chooses to provide. Users should not send statements, passwords, account numbers, or transaction histories by email.

How information is used

Information is used to check upload eligibility, extract and normalize transaction rows, validate balances and row integrity, create requested exports, enforce free and paid page allowances, secure accounts, process subscriptions, answer support requests, investigate reliability problems, and improve parser coverage. Bank-specific guides on this website do not mean a dedicated parser has been verified unless the page explicitly says so.

Retention and deletion

Uploaded bank statement PDFs, raw extraction artifacts, and generated outputs are deleted within 24 hours. Operational records that do not contain the uploaded file—such as account, billing, allowance, job-state, parser-version, validation-summary, abuse-prevention, and purge-audit records—may be retained longer when needed to operate, secure, bill for, and document the service. The product does not quietly turn short-lived customer statements into permanent training data.

Service providers and disclosures

GetBankStatement uses infrastructure and specialist providers to operate the service. These may include Vercel for web hosting, Clerk for authentication, Stripe for subscription billing, database and object-storage providers for application data, Amazon Textract for eligible scanned or degraded conversion paths, and website analytics tooling. Providers process information only for their service role and under their own contractual and privacy obligations. Information may also be disclosed when required by law, to protect users or the service, or as part of a business transaction with appropriate safeguards.

Choices and requests

You may ask about access, correction, deletion, or another applicable privacy right by emailing support@getbankstatement.com with the subject “Privacy request.” GetBankStatement may need to verify account ownership before responding. Rights vary by location, and some operational or legal records may need to be retained. You can limit nonessential browser storage through browser controls, but blocking the anonymous allowance cookie may prevent the free conversion flow from working correctly.

Questions about this notice should be sent to support@getbankstatement.com. GetBankStatement operates online from the United States and provides the service to customers worldwide.