Privacy Policy &
Data Sovereignty
Last Updated: June 21, 2026 • Policy Version 3.0
Our Zero-Ingress Protocol
At StatementConverter, we believe financial data privacy is an absolute, non-negotiable right. Traditional online converters require you to upload your highly confidential bank statements to their servers, exposing your transactions, balances, and identity to security leaks.
Our platform is fundamentally different. We have engineered a **Zero-Knowledge Architecture** that processes, parses, and converts bank statements locally inside your web browser using WebAssembly. **Your financial files never touch our servers and never leave your machine.**
Air-Gapped Sandbox
Your statements are processed purely in your browser's temporary memory (RAM). When you close the tab, all file memory is instantly purged.
Wasm Technology
We compile high-performance parser algorithms into a client-side WebAssembly binary, executing parser rules locally without server APIs.
No Server Ingestion
Since the conversion runs client-side, our servers do not see, read, log, or cache your transaction items or account statements.
Zero Tracker Telemetry
We do not track you. We collect only minimal, anonymous health logs (like conversion success/fail rates) to optimize performance.
1. Information We Collect
We process data under two distinct categories to manage user access and subscription billing, while maintaining an air-gapped environment for file data:
- User Account Information: When you register on our website, we securely store your name, email address, and encrypted password hash inside our Supabase authentication system. This is required to provision your Pro dashboard and store your custom parser requirements.
- Billing & Transaction Details: When you purchase a membership plan, we process transaction tokens, order IDs, and payment statuses via Razorpay. We do not store or process raw financial credentials (such as credit card numbers or UPI PINs) on our servers.
- No Document Collection: We explicitly state that **we do not collect, view, or store the contents of your financial PDF statements.** When you select a statement for conversion, the data is isolated in your browser.
2. Local Statement Decryption Security
Many Indian and international bank statements (such as HDFC, State Bank of India, ICICI, Axis, PNB, etc.) are encrypted with personal passwords (like your CIF number, Date of Birth, or Mobile number).
How we handle statement passwords: When you enter a password to unlock a PDF for extraction, the decryption is executed **strictly within your browser's local sandbox**. Our WebAssembly viewer uses standard AES-256 local library calls to decrypt the document. The password you type is held temporarily in RAM and is permanently destroyed as soon as the file is processed or the tab is closed. **We never transmit your passwords over the internet.**
3. Razorpay Secure Payment Processing
All billing and subscription payments on StatementConverter are processed safely and securely using **Razorpay**. Razorpay is a PCI-DSS compliant payment gateway, which enforces rigorous security standardizations. When you pay for a Pro Plan or Enterprise Custom Parser, your sensitive transaction details occur directly on Razorpay's secure checkout page. We never see or retain your raw billing credentials. We receive only a cryptographic confirmation signature indicating that the transaction succeeded to toggle your subscription status.
4. Global Compliance & Regulations
Because our product compiles with a local, zero-storage model, we comply naturally with global privacy mandates:
- GDPR & CCPA Compliant: We do not store personal data belonging to EU or California citizens, offering complete data erasure by design.
- DPDP Act (India) Compliant: We respect Digital Personal Data Protection laws, ensuring no unauthorized financial logs or profile harvesting occurs on our servers.
5. Refund & Cancellation Policy
We offer a **Free Tier** (converting up to 3 pages per document) for all users to test our custom conversion accuracy before buying. Because our product delivers digital software licenses and instant database sandbox parser creations, **all purchases of monthly/annual plans and $49 initiation custom parser setup fees are final and non-refundable.**
You may cancel your subscription at any time via your dashboard to prevent automatic renewals, and you will retain access to your Pro benefits until the end of your current active billing cycle.
6. Changes to this Charter
We reserve the right to modify this Privacy Policy at any time. Any changes will be published directly on this page with a revised date. We recommend checking this page periodically to stay informed about our data security practices.
Got Questions about Data Safety?
If you are a Chief Information Security Officer (CISO), auditor, or accounting firm and require detailed documentation on local client-side processing, please contact us.