Privacy Policy
How Bank Statement Converter AI collects, uses, and shares personal information
Last updated: October 15, 2026
guaguaguaxia, the individual operator of Bank Statement Converter AI ("we", "us"), respects your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use Bank Statement Converter AI at https://bankstatementconvertsai.com (the "Service").
Please read this policy before you use the Service. Using the Service means you have read it. If we make a material change, we will email the account address and post a notice at least 15 days before it takes effect.
This policy is not legal advice.
1. Who is responsible
The data controller is the individual operator of this Service:
- Name: guaguaguaxia
- Privacy email: guaguaguaxia@gmail.com
- Support email: guaguaguaxia@gmail.com
- Data protection officer: not appointed
There is no separate registered company and no business street address for this Service.
2. Information we collect
Information you give us:
- Account information from Google sign-in: name, email address, and the basic profile Google shares with us. We do not store a password for the Service.
- Files you upload, including bank-statement PDFs, and the CSV, Excel, or OFX files we generate from them.
- Payment status: the plan, amount, currency, and whether a payment succeeded. We do not store the full card number. Card data is handled by the payment processor in section 5.
- Messages you send through the contact form: your name, email address, and the message.
Information collected automatically:
- Device and network data: IP address, browser type, operating system, and the time of the request.
- Usage data: pages you open, conversion jobs, page counts, and error logs needed to run and protect the Service.
We do not collect precise location, and we do not ask you to create a password.
3. How we use information
| Purpose | Legal basis |
|---|---|
| Provide conversion, accounts, and file delivery | Contract |
| Bill for plans and page packs | Contract |
| Customer support | Contract or legitimate interests |
| Service notices about billing, security, and policy changes | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Understand failures and improve the converter | Legitimate interests |
| Keep records the law requires | Legal obligation |
We may use aggregated or de-identified data that does not identify you. We do not use your statements or converted files to train our own models.
4. Cookies
| Type | Purpose | Can you turn it off? |
|---|---|---|
| Strictly necessary | Keep you signed in and protect the account | No |
| Functional | Remember language and similar preferences | Yes, in the browser |
| Analytics | Not currently used | — |
| Marketing | Not used | — |
We do not use advertising cookies or social-media tracking cookies. You can block cookies in the browser. Blocking strictly necessary cookies can prevent sign-in. See the Cookie Policy.
5. Sharing
We do not sell personal information, including a "sale" as the CCPA uses that word. We share information only as follows:
- Service providers, under confidentiality terms. Cloudflare hosts the Service and stores files and account data. DeepSeek receives the contents of a statement so it can convert that file. Waffo Pancake, a PCI-DSS payment processor, is the only party that processes payment card data. Card data is not stored on our servers.
- Authorities, when the law, a court, or a valid government request requires it.
- A buyer of this Service, if the Service is transferred. We would tell you before the transfer where the law requires notice.
- Anyone else, only with your prior consent.
We do not share statement contents with advertisers.
6. Security
We use HTTPS for data in transit. Access to production systems is limited to what is needed to operate the Service. Uploaded files and converted files are deleted 24 hours after upload.
If a security incident is likely to affect your rights, we will notify you and the relevant authority without undue delay, and where the law sets a clock, within 72 hours after we become aware of it. Keep your Google account secure and do not share access to the Service.
7. How long we keep information
| Data | How long | Then |
|---|---|---|
| Uploaded statements and converted files | 24 hours after upload | Deleted |
| Job record after a job expires: job ID, created time, page count, page movements, and final status | 90 days | Deleted |
| Account information | While the account exists, then 30 days after you delete it | Deleted or de-identified, except records listed below |
| Payment and tax records | Up to 7 years where accounting law requires it | Deleted or archived |
| Support messages | 2 years | Deleted |
| Security logs | 12 months | Deleted |
8. Your rights
Email guaguaguaxia@gmail.com to use these rights. We respond within 30 calendar days.
| Right | What it means |
|---|---|
| To be informed | Know what we collect and why |
| Access | Receive a copy of your personal information |
| Correction | Fix information that is wrong or incomplete |
| Deletion | Ask us to delete information where the law allows |
| Restriction | Ask us to pause processing in the cases the law allows |
| Portability | Receive your information in a machine-readable form |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent where processing was based on consent |
You can also complain to the data protection authority where you live if you think we handled a request poorly. You can delete the account from the security settings while signed in.
9. Marketing
We do not currently send marketing newsletters. Messages about a bill, a security event, or a change to these policies are part of the Service. You cannot opt out of those messages while the account is open, because they are how we tell you about charges and account access.
10. International transfers
Cloudflare may process data in more than one country. DeepSeek processes statement contents to perform the conversion. Waffo Pancake processes payments. Where a transfer needs a safeguard, we use a contract that includes the EU Standard Contractual Clauses, or we transfer only to a recipient that offers an equivalent level of protection.
11. Children
The Service is for people who are 18 or older. We do not knowingly collect personal information from anyone younger. If you believe a child has given us information, email guaguaguaxia@gmail.com and we will delete it.
12. Other sites
The Service links to Google for sign-in and to Waffo Pancake for checkout and subscription management. This policy covers information we collect. Those services have their own policies.
13. Changes
For a material change, we will post the updated policy on this page and email the account address at least 15 days before it takes effect. The date at the top is the latest update. Using the Service after the effective date means you accept the update.
14. Contact
- Privacy and support: guaguaguaxia@gmail.com
- Operator: guaguaguaxia
- Website: https://bankstatementconvertsai.com
- Hours: we read email on business days, 09:00–18:00 UTC+8
Bank Statement Converter AI · https://bankstatementconvertsai.com