Privacy & security
How PDFGenie stores, processes and deletes your statements.
Bank statements are sensitive. Here is exactly what happens to them.
How long we keep your files
| Situation | Uploaded PDF and results are deleted after |
|---|---|
| The conversion worked | 24 hours |
| The conversion failed or had problems on our side | 72 hours |
| You shared the file with a problem report | 90 days, or sooner if you ask |
| You click Delete now on the result page | Immediately |
- Files are stored in encrypted object storage and deleted by an hourly cleanup job, with a storage lifecycle rule as a backstop.
- "Failed or had problems" means the converter crashed or timed out, found no tables in a PDF that has text, had transactions that didn't add up to the running balance, or had to use OCR. We keep these files a little longer to find out what went wrong and fix the converter. Problems with the file itself (damaged PDF, wrong password, too large) are deleted after 24 hours as usual.
- Delete now also deletes any copy you shared with a problem report.
- We keep metadata needed for billing and support: file name, page count and time of the conversion.
How we improve the converter
Bank statement layouts change all the time, so we test the converter against real layouts. For that we keep an anonymized layout of some documents: the position of each word on the page, with the personal parts replaced before anything is stored:
- names, addresses, descriptions and other text are replaced by random letters;
- account, card, phone and reference numbers are replaced by random digits;
- every amount is multiplied by a random factor that isn't stored, so balances still add up but the real figures can't be recovered;
- what stays readable is generic statement wording ("Date", "Balance", "Opening balance", month names, currency codes), dates and short numbers such as page numbers.
An anonymized layout isn't linked to your account or to the conversion, and it contains no part of the original file. We keep one for the first few documents of each layout and for documents the converter had trouble with.
Sharing your PDF is up to you. If a conversion goes wrong, use "Something not right?" on the result page and tick "Share this PDF with us". You can also leave your email address, and we'll tell you when it's fixed.
Failed and shared files are used only to fix the converter. We may review them with AI development tools, under terms that don't allow the provider to train on them.
Processing
- Conversion runs on our own servers using an open-source PDF engine, with no AI services involved. Your statements are never used to train AI models.
- Files travel over HTTPS between your browser, our edge workers and the converter.
- Passwords for encrypted PDFs are used once in memory and never stored or logged.
Access
- A conversion can only be opened by the account (or, without an account, the browser) that uploaded it.
- Without an account we count usage by a salted hash of your IP address; the raw IP isn't stored.
Payments
Payments are handled by Stripe. We never see or store card numbers.
Questions? Email support@pdfgenie.app.