Privacy Policy

Last Updated: October 12, 2025

At BankStatementReader, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information.

Cookies & Analytics

We use Google Analytics to understand how visitors use our site. This helps us improve your experience and identify issues.

Account Data

When you create an account with us (via Clerk authentication), we collect:

• Email address
• Full name (optional)
• Authentication provider info (Google, Apple, etc.)

This data is used solely for authentication and account management. We do not sell or share your personal data with third parties.

Statement Data

Bank statements you upload are:

• Encrypted at rest in Cloudflare R2 storage
• Accessible only to your account
• Processed by our OCR system (PaddleOCR)
• Retained until you delete them

We never share your financial data. All processing happens within our secure infrastructure.

Data Storage

Cookie consent preferences: Stored in your browser's localStorage (client-side only).

Account data: Stored in Cloudflare D1 database (encrypted).

Uploaded files: Stored in Cloudflare R2 (encrypted, region: auto).

Third-Party Services

Your Rights (GDPR)

If you are in the European Union, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests

To exercise these rights, email us at privacy@bankstatementreader.com

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy.