Security & privacy
So the honest position is this: we want as little of your data, for as short a time, as physically possible while still doing the job. Here is exactly what happens.
Conversion runs inside your browser tab. The engine is the same Go code that powers the command-line tool, compiled to WebAssembly and downloaded once, so parsing happens on your own machine. There is no upload to intercept, no server log to leak, and nothing for us to hand over.
This is not a promise about how carefully we handle your files — we never receive them. Our servers hold your account, your plan, and how many pages you have converted. No PDF, no transaction, and no account number passes through them.
Converted rows live in the page while you review and export them. Navigate away and they are gone, with no retention window to reason about and no copy left behind to expire.
A PDF password is used once, in your browser, to decrypt that document in memory. It is not sent to us, not logged, not cached, and not persisted anywhere.
Your documents are not used to train models, not shared with third parties, and not sent to external AI services. Extraction is deterministic geometry, not a model — and since the work happens on your device, there is nothing to send even if we wanted to.
Anonymous conversion needs no email, no name, and no account. Signing in records your Google account id and email so a plan can be attached to it, and payment is handled entirely by Stripe. Statements are never part of your profile, because they never reach us.
You pick a PDF. It is read by the page, not sent anywhere — no network request carries it, which you can confirm in your browser's network tab.
The WebAssembly engine extracts text, geometry and table structure in your browser's memory. A password-protected file is decrypted locally with the password you supply, which is discarded immediately after.
The extracted rows stay in the page so you can correct them and export to CSV, Excel, JSON or OFX as often as you like, without re-parsing. Exports are generated on your device too.
That is the whole deletion story. Nothing was stored server-side, so nothing needs purging and no sweep has to run.
You keep every right to your documents, and you are not granting us a licence over them - there is nothing to license, because we never receive them. Conversion happens on your device and the output is yours alone.
The service is provided as-is. Extraction is highly accurate on supported, text-based statements, but it is a tool and not a substitute for review — which is exactly why the balance check, the confidence flags and the editable table exist. Verify figures before filing anything that matters.
Do not use the service on documents you are not authorised to process. Attempts to circumvent plan limits or otherwise abuse the service will get an account or IP blocked.
Reach us directly at [email protected]. We acknowledge reports within one business day and never pursue good-faith researchers.
Please do not email statements or other financial documents as attachments.