Privacy Policy
Last updated: April 2026
Data controller
The data controller for pdftoexcel is Matrizexplícita Lda, a company registered in Portugal. All data-protection correspondence should be addressed to the contact below.
What we collect
Files you upload (PDF bank statements), the transactions we extract from them, your account email, and basic usage metadata (page counts, parse timings). We do not collect your account numbers, card numbers, or routing numbers beyond what is printed on the statement you upload.
How we use it
Only to operate the converter — parse your PDF, compute the reconciliation, and deliver the exported file. We do not use your statements to train machine-learning models. We do not sell your data.
Retention
By default, uploaded PDFs and extracted transactions are deleted 24 hours after conversion. Paid plans allow you to pin a document for longer (30–90 days depending on tier). You can delete any document manually at any time from your dashboard.
Sub-processors
We use Vercel (hosting), Supabase (database + storage), Fly.io (worker), Stripe (payments), Resend (email), and Google Gemini / Anthropic (model inference for the fallback path). When a PDF falls back to the AI extractor, its text is sent to the model provider. Providers do not retain data for training under the enterprise API terms we use.
Encryption & access
All traffic is served over HTTPS. Files at rest live in a private object-storage bucket with signed-URL access (default 5-minute TTL). Only your own account can list or download your documents.
Contact
Privacy questions or deletion requests — email privacy@pdftoexcel.app. Postal correspondence: Matrizexplícita Lda, Portugal.