Privacy

What we collect, where it goes, and how long we keep it. The short version is on the security page.

Bank exports and text PDFs

Bank exports (CSV, Excel, OFX, QBO, QFX, QIF, IIF) and text-based PDF statements are converted inside your browser. They are never uploaded to, processed by or stored on our servers. Passwords for protected PDFs are used only in your browser to open the file.

Scanned statements and photos (OCR)

A scanned statement or photo can only be read on a server. We ask before uploading it. When you choose OCR, the file is sent over an encrypted connection to our server, which passes it to two service providers: Microsoft Azure AI Document Intelligence reads the printed text, and Anthropic's Claude organizes it into transactions. The file is processed in memory and is not saved by us; our providers handle it under their data-processing terms. The extracted transactions are sent back to your browser and not kept on our servers.

Accounts

If you create an account, sign-in is handled by Google Firebase Authentication (with Google or email and password). We store your email address, your page balance, your plan and a record of page use and purchases. We do not store the contents of your files with your account.

Payments

Payments are processed by Stripe. We never see or store your card number; we keep a reference to your Stripe customer record.

Cookies and storage

We store a small counter in your browser's local storage to apply the free daily page limit, and Firebase keeps your sign-in in your browser. We do not use advertising cookies.

Your rights

US residents (including California residents under the CCPA) and EU/UK residents (GDPR) can request access to or deletion of their account data by emailing support@bankformatconverter.com.