Security

In one paragraph

The PDF you choose is opened by code running in your browser and is never uploaded. You may black out any region before continuing; the black is burned into the exported pixels, not layered over them. The page images and text you approve are sent to Anthropic’s API to extract transactions and are stored privately to your account. There is no end-to-end encryption and we hold no security certification; what follows is exactly what we do.

What never leaves your browser

• The original PDF file, including any pages you deselect.
• Anything under a redaction box — it is removed from the rendered image and from the extracted text before either is sent.
• Your PDF password, if the file has one. It is used by the in-browser reader and discarded.

What is sent, and to whom

• Approved page images and text go to our server over TLS, and from there to Anthropic’s API for extraction. Anthropic does not train on API data and retains API inputs for up to 30 days by default. See the sub-processor list.
• Nothing else — no bank credentials, no account numbers you redacted, no filenames in analytics.

How stored data is protected

• Page images live in a private storage bucket. Access is enforced by per-user database policies, and the app only ever hands your browser a short-lived signed link to your own pages.
• Transactions and statements are protected by row-level security in the database: every read and write is scoped to the signed-in user, and the application never bypasses that boundary for user data.
• Data is encrypted in transit (TLS) and at rest by our hosting providers.
• Payments are handled by Stripe’s hosted checkout. Card details never reach us.

Deleting your data

Settings lets you clear every statement, transaction and stored page image at any time. Deleting your account entirely is available on request through the contact page until the self-service control ships.

Reporting a problem

If you believe you have found a security issue, tell us through the contact page and we will respond within two business days.