Privacy Policy

Last updated: July 12, 2026

What we collect

• Uploaded statements — the PDF you upload and the transactions extracted from it, stored in our database and private file storage (Supabase) to generate and re-open your reports.
• Account data — email address and login credentials if you create an account (managed by Supabase Auth; Google sign-in shares your Google account email with us).
• Billing data — payments are processed by Stripe; we never see or store full card numbers, only Stripe customer and transaction references.
• Operational data — IP-based rate-limit counters and request logs to keep the Service reliable and abuse-free.

How we use it

Only to run the Service: extracting and categorizing your transactions (statement content is sent to Anthropic's Claude API for processing), generating reports, operating your account, and responding when you ask us to contact you. We do not sell your data or use it for advertising.

Retention and deletion

Uploads and reports are kept so you can re-open them. Deleting your account (Settings → Delete account) permanently removes your uploaded files, extracted data, reports, and login. Anonymous reports can be removed on request.

Processors we rely on

Supabase (database, file storage, authentication), Vercel (hosting), Anthropic (transaction extraction and categorization), and Stripe (payments). Each processes data only to provide their service to us.

Contact

Privacy questions or deletion requests: contact us through the site.