Last updated: September 2026
Statementfold converts files you upload. This policy explains exactly what happens to them.
What we collect
- Your files. The files you upload and the results we generate.
- Account data. Your email address, and your name and avatar if you sign in with Google.
- Billing data. Company name, VAT/tax ID and billing address if you enter them, plus payment records held by Stripe. We never see your card number.
- Usage data. Job identifiers, tool used, page counts, timings and error codes. File names, file contents and extracted data are never written to logs.
How your files are handled
- Files are uploaded directly to Cloudflare R2 object storage over TLS and encrypted at rest (AES-256).
- Processing happens in memory on our worker. Where a tool uses AI, the relevant pages are sent to the Anthropic API under terms that prohibit training on your data and with zero data retention where available.
- Files are never sent anywhere other than our storage and the Anthropic API.
- Inputs and outputs are deleted automatically 24 hours after upload. A countdown is shown on every result page. You can delete a job earlier from the result page.
- Extracted preview data (for example the transaction table you edit before download) is stored with the job and deleted at the same time as the files.
Anonymous use
You can try a small file without an account. We set a signed cookie so the result stays available to you and can be attached to your account if you sign up. No profile is built from anonymous use.
Rate limiting and abuse prevention
We record a hashed IP address for anonymous uploads for up to 24 hours to enforce rate limits.
Third parties
| Service | Purpose | Data |
|---|---|---|
| Cloudflare R2 | File storage | Encrypted files, 24 h |
| Anthropic | AI extraction | Statement pages / rows for the duration of the request |
| Supabase | Database | Account, jobs, ledger |
| Stripe | Payments and invoices | Billing details, payment method (held by Stripe) |
| Resend | Sign-in emails, receipts, and one reminder if you preview a conversion but do not unlock it | Email address |
| Sentry | Error monitoring | Error metadata (no file contents) |
| Vercel / Fly.io | Hosting | Request metadata |
| Plausible | Privacy-friendly analytics (no cookies, no personal data) | Page views and anonymous funnel events |
Your rights
Email us to export or delete your account data. Deleting your account removes your jobs, files and preview data immediately; invoices are retained as required by tax law.