Privacy Policy

Statementpad is operated by Waylum Inc., Ontario, Canada. This policy explains what we collect, and what we never see.

Your statements

Your statements never leave your device. They are read and converted by code running in your browser, on your device. The PDF, its password if it has one, and every transaction, balance and account number in it stay on your device. They are never sent to us or to anyone else, and we cannot see or recover them. While you work, your browser keeps the open statements so a reload or sign-in does not lose them. Start over clears them, and anything left for more than an hour is cleared on your next visit. PDF passwords are never kept.

To read scanned pages, your browser downloads an OCR engine and an English language file from our site and may keep them in its cache. They contain no information about you.

What we collect

• Account. If you create one, your email and sign-in details, handled by Clerk.
• Page counts. How many statements and pages you download each month, and whether the format is an accounting one, to apply your plan’s limits. Not their names or contents.
• Payments. Handled by Polar, our merchant of record. We never see your card number.
• Usage. Anonymous counts, such as how many statements were converted or which export format was chosen, and privacy-friendly page analytics from Cloudflare Web Analytics, which does not use cookies.
• On your device. Your preferred export format and date format, and the statements you have open, kept in your browser’s storage.

Keeping and deleting

We keep your account and page counts while your account is open. When you close it, we delete them within 30 days, apart from backups, which expire within a further 30 days.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, and to complain to a data protection authority. Emailhello@statementpad.com.

Subprocessors

We use these companies to run Statementpad, and we never sell your data. Each one is bound by data protection terms.

• Cloudflare (United States): hosting, database, security and page view counts without cookies.
• Clerk (United States): sign-in and accounts.
• Polar (United States): payments, tax and receipts, as merchant of record.

Where the law requires it, transfers outside your country are covered by safeguards such as the EU Standard Contractual Clauses and the UK Addendum.

Changes

If we make significant changes, we will email account holders at least 30 days before they take effect.