Privacy Policy
BankStatementMate is operated by Tony stack, based in Hong Kong. This policy explains how information is handled when you use bankstatementmate.com. Contact us at support@bankstatementmate.com about this policy or your information.
Your statement stays in your browser. The converter processes PDF and image files on your device. Account, billing and service-usage information is handled separately on our servers and by the service providers described below.
Statement files and exported spreadsheets
The current converter does not upload your statement files or extracted transaction rows to our servers or to an external AI service. PDF extraction, image recognition, the transaction preview and spreadsheet creation run in your browser. The browser downloads the software and recognition model needed to do this; downloading those assets does not send your statement to us.
Use Remove file or leave the page to clear the current in-page result. Exported files you save remain on your device until you delete them. Browser caches may retain application assets and the recognition model. If you use your device's sharing feature, the app you select receives the exported file under its own practices.
Account and security information
When you register, we store your name if provided, email address, email-verification status, account identifier, creation and update times, and a password hash. We also process verification and password-reset tokens, login sessions and their expiry times. Session records can include an IP address and browser information. We use this information to provide account access, send requested account emails, protect accounts and limit abusive requests.
Our account service records free-trial use, page allowances, credit changes and conversion records such as a job identifier, page count, time and success or failure status. These records support allowance management and troubleshooting; they do not contain the statement file, its filename or extracted transaction rows.
Payments and subscriptions
Stripe handles checkout and payment processing. When you choose a plan, we send Stripe your account email, an internal account reference and the selected plan. Payment details entered on Stripe's checkout are handled by Stripe; our application does not receive or store your full card number or security code.
We keep checkout references, Stripe customer and payment or subscription identifiers, plan, payment amount, receipt time, subscription status, cancellation state and records needed to grant or revoke page allowances. We use these records to supply purchased pages, manage subscriptions and address payment or refund issues. Stripe describes its processing in its Privacy Policy.
Cookies, browser storage and usage events
Account access uses secure session cookies. Blocking those cookies can prevent sign-in and account features from working. Our own usage measurement uses a random identifier in browser session storage and records events on selected site pages, such as a page visit, converter click, file selection, conversion outcome, download, signup start or checkout opening.
These event records can include the site page path, landing page path, event time, file type, export format, selected plan or a broad error category. They do not contain statement content, filenames, email addresses, account identifiers, full referrer URLs or URL query strings. Event requests omit authentication cookies, and this event table is not joined to account or payment identities. We use aggregate counts to understand where the service works or fails. Clearing browser storage removes the local session identifier; it does not erase events already received.
Cloudflare Web Analytics also collects page-visit and performance information, including the page URL, referring page, browser or device category and loading timings. We use this separate service to understand traffic and page performance. Cloudflare describes the collected fields in its Web Analytics documentation.
Service providers and support
Cloudflare hosts the website, application service and database, delivers account emails and routes support email. Cloudflare may process technical request information such as IP addresses to deliver and protect the service; see its Privacy Policy. Support messages are received in a Google-hosted mailbox; see Google's Privacy Policy. If you contact us, we receive your email address and whatever you include. Please do not send bank statements, passwords or full payment-card details by email.
We use these providers to operate the service and handle support. Their infrastructure may process information outside your country, including outside Hong Kong. We may disclose information when required by applicable law or when necessary to address fraud, security incidents or legal claims.
Retention and your choices
Account, usage, conversion-status and billing records are retained for service operation, support, security, accounting and handling disputes. They are not all automatically deleted when you close your browser or sign out. Payment and transaction records may need to be retained after an account closes to meet legal and accounting obligations.
To request access, correction or deletion of your account information, email support@bankstatementmate.com from your account email. We may need to verify your identity before acting. Some records may need to be retained for the reasons above; we will explain any applicable limitation. Account deletion is handled through support, not an automatic in-app deletion control. Statutory privacy rights depend on where you live and the law that applies.
Changes and contact
We will update this page when our data practices change and revise the date above. Review the Terms of Service for how the converter, trial and paid allowances work. For privacy questions, contact Tony stack at support@bankstatementmate.com.