Privacy Policy

Who This Covers

This policy applies to Statement Analyser, a manual bank-statement upload and analysis service. Users should upload statements only when they own the data or are authorised to process it.

Financial Analysis Content

Under the current architecture, uploaded bank statement PDFs and CSV files are processed temporarily and are not intentionally persisted in the application database. Financial workspace information is kept in your browser's session storage for the active browser session.

Statement Analyser does not intentionally persist extracted transaction rows, transaction narrations, statement balances, audit-review evidence, generated reports, or AI financial conversation contents in the application database. Generated reports are assembled in your browser for download.

Manual uploads are processed to generate the analysis shown in your browser. The product does not provide bank connectivity or automatically connect to your bank account.

Account And Service Data

Statement Analyser may store limited service data needed to operate accounts, entitlements and payments. This can include Supabase authentication identity, profile information, credit wallet metadata, credit ledger entries, analysis usage metadata, Razorpay payment order identifiers, payment status, purchased credit amounts, webhook processing metadata and timestamps.

This means the service should not be described as anonymous or as storing no data.

AI Processing

When you invoke AI features, selected and bounded statement evidence relevant to your question may be sent to OpenAI to generate an answer. AI is not invoked for ordinary local workspace navigation. Requests are configured with store: false, which disables application-state storage for the response, but the provider may still process or temporarily retain request data under its API data policies, including safety and abuse-monitoring controls.

AI responses are informational and productivity assistance and should be checked against source evidence and professional judgement.

Guest users do not have access to AI questions in the current product.

Service Providers

Vercel hosts and delivers the web application. Supabase provides authentication and the database used for account, entitlement, usage and operational metadata. Razorpay processes one-time credit purchases and payment events. OpenAI processes bounded evidence only when an authenticated user invokes AI assistance.

Each provider processes data for its stated operational purpose under its own terms and policies. We do not publish infrastructure identifiers, project IDs, merchant identifiers, API keys or technical secrets on public pages.

Cookies

Statement Analyser uses necessary browser cookies for Supabase authentication and guest entitlement identity. These cookies support login, session continuity and the one-free-analysis guest limit.

The current product does not use advertising or marketing analytics cookies that require a separate promotional cookie banner.

Your Choices

You can avoid creating an account by using the one guest analysis. Account holders can request account assistance, privacy/data help or account deletion review through the contact page.

Signed-in account holders can also submit a deletion request from Settings by typing DELETE. This starts a manual review; it is not an instantaneous automated deletion. Payment, ledger, security, or other operational records may be retained where needed for legal, accounting, fraud-prevention, dispute, or service-integrity purposes.

Contact

For privacy requests, use the Contact page or email support if a support address has been configured. You can also start from this privacy request link.