B BankToSheet

Privacy Policy

Last updated: 4 November 2026

A bank statement is one of the more sensitive files a person can hand to a website. This page describes exactly what happens to yours, in plain terms.

1. The short version

  • Your file is read in your own browser and is not uploaded as a file.
  • Only the text needed for the conversion is sent to a language model, and only for that request.
  • We do not keep your statement, your transactions or your spreadsheet on any server.
  • There are no advertising trackers and no third-party analytics on this site.

2. What happens when you convert a file

When you drop a PDF or an image into the converter, the file is parsed in your browser. The resulting text — or, for an image, the image data — is sent over HTTPS to our backend on Cloudflare and passed to a language-model provider so the rows can be identified and structured. The structured result is returned to your browser and rendered in the preview.

The request is handled in memory. We do not write your statement, its text or the resulting spreadsheet to a database, a log or a file store. Once the response is returned, the copy in memory is discarded. Downloaded spreadsheets exist only on your own device.

3. Third parties involved in a conversion

  • Cloudflare — hosts this site and runs the backend that receives the request.
  • Model provider — performs the extraction. Statement text is sent only for the duration of the request and is not used by us to train anything.
  • Payment provider — a Merchant of Record that handles checkout, receipts and tax for paid plans. We never receive or store card numbers.

4. What we do store

  • In your browser only: a licence key, if you have bought a plan, so you do not have to retype it. Clearing site data removes it.
  • At the payment provider: your email address and billing details, because a receipt and a subscription require them. That data lives in their system, under their policy — we can see your email address and plan status, nothing more.
  • Server logs: Cloudflare records standard request metadata (IP address, timestamp, path) for security and abuse prevention, retained on their normal short schedule. We do not build profiles from it.

5. What we never do

  • We do not sell, rent or share your data with advertisers or data brokers.
  • We do not use your statements to train models.
  • We do not ask for your bank login, account number or online-banking credentials. Do not enter them anywhere on this site — no legitimate converter needs them.

6. Your rights

Because we hold almost nothing, most requests are quick. You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected] and we will respond within 30 days. If you are in the EEA or UK, you also have the right to complain to your local supervisory authority.

7. Children

The service is meant for adults handling their own or their clients' finances. It is not directed at anyone under 18 and we do not knowingly collect data from children.

8. Changes

If this policy changes we will update the date at the top. Material changes will be noted on the site.

9. Contact

Questions about privacy: [email protected].