Privacy Policy

Export Bank Statement ("we", "us") operates exportbankstatement.com (the "Service"). This policy explains what we do with your information. We've built the Service to hold as little of your data as possible.

The short version

• We convert your bank statement and delete the file immediately afterward. We do not store your statements.
• We never use your data to train AI.
• Uploads and downloads happen over an encrypted connection.

Files you upload

When you upload a statement PDF, we process it in memory to extract and reconcile the transactions, return the result to your browser, and delete the file right after. We do not sell, share, or use your statements to train any model. The extracted data is returned to you and is not retained on our servers.

Other information we process

• Free-usage limit: to enforce the free daily limit we use a functional cookie and a short-lived count tied to your IP address. This is not used to identify you or for advertising.
• If you contact us or join the list: your email address and anything you write, so we can reply and send updates. You can unsubscribe anytime.
• Basic logs: standard server logs (timestamps, error information) for security and reliability, kept briefly.

Accounts

If you create a free account (via Google or an email magic-link), we store your email address and basic sign-in records to operate your account and apply your daily allowance. We still do not store the statements you convert. You can ask us to delete your account at any time.

Cookies

We use only strictly necessary / functionalcookies (for example, the free-usage limit). We do not use advertising or cross-site tracking cookies. If that ever changes, we'll ask for your consent first.

Lawful bases (UK / EU)

Where UK or EU data-protection law applies, we rely on legitimate interests (to provide the conversion you requested and to prevent abuse of the free tier) and consent (for example, when you join our email list).

Service providers

We use a small number of providers to run the Service — such as cloud hosting and email delivery. They process data only to provide their service to us. A current list is available on request.

Where data is processed

The Service may be operated from, and limited data processed in, locations including India, the UK/EU and the US, depending on our hosting. Because uploaded files are deleted immediately after conversion, your statements are not stored across borders.

Retention

• Uploaded statements: deleted immediately after conversion.
• Email / contact data: until you ask us to delete it or unsubscribe.
• Logs: a short rolling period.

Your rights

Depending on where you live (UK/EU GDPR, India's DPDP Act, US state laws and others), you may have rights to access, correct, delete or object to the processing of your personal data. Because we don't store your statements, most requests are quick to handle. Email us to exercise any right.

Children

The Service is not intended for anyone under 18, and we do not knowingly process their data.

Security

See our Security page — in short: encryption in transit, in-memory processing, auto-delete, no training, and no public storage.

Changes

We'll update this page if our practices change and revise the date above.

Contact

Questions or requests: rudra@exportbankstatement.com