No Data Retention

bankstatement.ai is built for teams who need clean statement spreadsheets and company billing links without building a long-term archive of sensitive financial documents. This page describes what we keep, what we delete, and for how long.

1. Our principle

We do not retain your uploaded bank statements as a permanent record. Files and derived results exist only as long as needed to process your request, deliver exports, and honor short-lived sharing links. After that, they are removed from our systems.

2. Uploaded files

When you submit a statement, the file is stored temporarily in encrypted object storage so our workers can read and process it. Once processing completes—or if processing fails and cleanup runs—the upload is deleted. Stale uploads without a completed result are removed within seven days.

3. Processing results

Structured results (transactions, company groupings, verification metadata, and export files) are available to you for seven (7) days from creation. After expiry, result records, export files, and associated job metadata are deleted automatically.

Result links sent by email include a signed token and expire when the underlying result expires.

4. What we do not store

• A browsable history of your past statements in the product;
• Long-term copies of PDF, CSV, or XLSX uploads after processing;
• Full payment card numbers (Stripe handles payment credentials);
• Your bank login credentials—we never ask for them.

5. Account and billing records

We retain your email address, password hash, session tokens, subscription status, and monthly page usage while your account is active. Billing records required for tax, fraud prevention, and payment reconciliation may be retained by us and Stripe as required by law and payment network rules.

6. Company matching data

To identify paid companies across statements, we may store normalized merchant descriptors and mathematical embeddings derived from transaction text—not full statements. These records do not include your account number, full statement PDFs, or row-level transaction history tied to your identity after result expiry.

7. Logs and security

Like most online services, we keep short-lived server logs (for example, request timestamps, error codes, and rate-limit counters) to secure and operate the platform. Routine error monitoring is configured to avoid sending statement contents to third-party monitoring tools.

8. Anonymous trial

Users without an account receive a limited free page allowance tracked by a signed anonymous device token. That token does not contain statement content; it exists only to prevent abuse of the free tier.

9. Your responsibilities

Because results expire, download exports you need before the seven-day window ends. If you email a result link, anyone with the link can access the result until it expires—share links only with intended recipients.

10. Questions

For retention or deletion questions, contact hello@bankstatement.ai.