Security

Last Updated: July 2, 2026

You are trusting us with financial documents, so this page describes plainly how they are handled. It only lists what the product actually does. If anything here is unclear, email us before uploading anything.

We never ask for your bank login

BankStatementReader works on PDF statements you already have. We do not connect to your bank, and we will never ask for your online banking credentials. If a message asking for bank credentials appears to come from us, it is not from us.

The free tools run in your browser

The free tools on this site (the converter demo, statement redaction, CSV utilities, and the rest) process files entirely in your browser using client-side JavaScript.

  • Files you open in the free tools are not uploaded to our servers
  • The only network requests those pages make are for the page itself and a built-in sample dataset
  • Closing the tab discards everything

What happens when you upload a statement

The full converter (for signed-in users) works differently, because extraction runs on our infrastructure:

  • Your PDF is transmitted over HTTPS and stored in our cloud object storage, which encrypts data at rest
  • Processing systems access the file through short-lived signed URLs, not shared credentials
  • Statement page images are sent to a third-party AI provider solely to perform extraction, as described in our Privacy Policy
  • Temporary copies made during processing are deleted when processing finishes
  • Extracted transactions are stored in our database and are accessible only to your account

Deletion you control

Statements are retained until you delete them. There is no forced retention.

  • Deleting a statement from your dashboard removes the uploaded PDF, the extracted transactions, and any generated export files
  • Deleting your account removes your account data and purges your stored statements and exports

Payments

Payments are handled by Stripe using Stripe-hosted checkout. Your card number never touches our servers, and our database stores only Stripe customer and subscription references, never card details.

Reporting a security issue

If you believe you have found a vulnerability, email support@bankstatementreader.com with the details. We read every report.

← Back to Home