1. Introduction

Bank Statement Sheet (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our bank statement conversion service at bankstatementsheet.com.

The service is operated by Alim Polat, Stockholm, Sweden, who is the data controller (personuppgiftsansvarig) for personal data processed by the service.

2. Data We Collect

We collect and process the following data:

Uploaded Files: PDF bank statements you upload for conversion
Account Information: Email address if you create an account
Usage Data: Number of conversions, pages processed
Technical Data: IP address, browser type (for security and analytics)

3. How We Use Your Data

To provide the bank statement conversion service
To process payments for premium subscriptions
To improve our parsing algorithms and service quality
To communicate service updates and support

4. Data Retention

Uploaded PDF files are automatically deleted within 24 hours. We do not permanently store your bank statement data. Converted files are held in memory and available for download for about 10 minutes after conversion, after which they are deleted — you can simply convert the statement again if you need a new download.

5. Data Security

We implement industry-standard security measures:

All data is encrypted in transit (HTTPS/TLS)
Files are processed in memory and never written to disk
No file sharing between users

6. GDPR Compliance

For users in the European Economic Area, you have the right to:

Access your personal data
Request deletion of your data
Export your data in a portable format
Object to processing of your data

To exercise these rights, contact us at privacy@bankstatementsheet.com

7. Third-Party Services

We use the following third-party services:

Stripe: Payment processing
Supabase: Database and authentication
Cloudflare: CDN and security
Google Gemini: AI extraction. For statements handled by the AI extraction path, the statement content is sent to Google Gemini for processing before the file is deleted.

Uploaded PDF files are processed in memory and deleted within 24 hours; they are never permanently stored. For statements from banks without a dedicated parser, the AI extraction path sends the statement content to Google Gemini for processing before the file is deleted. All transfers are encrypted in transit (HTTPS). Processing takes place entirely within the EU: the API runs in europe-west4, the database is hosted in Frankfurt, and Google’s AI extraction runs in europe-west4.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: privacy@bankstatementsheet.com
Data controller: Alim Polat, Stockholm, Sweden