Bank Grade Compliance

Privacy and Data Security Policy

Last Updated: October 2026

Executive Summary for Financial Professionals: StatementCleaner operates on an ephemeral Zero Data Retention infrastructure. When you upload a bank statement, it is decrypted and processed entirely in volatile memory and immediately purged after parsing. We never write your financial data to persistent disk storage, never sell client records, and never use your documents to train public AI models.

1. Data Collection and Processing

StatementCleaner collects minimal data necessary to deliver document extraction services. When you upload a document:

Document Parsing: The document payload is streamed over TLS 1.3 and AES 256 encrypted channels to our isolated processing engine.
In Memory Lifecycle: Once tabular rows are extracted and returned to your browser, the in memory buffer is flushed immediately.
No File Logging: We do not log transaction descriptions, account numbers, routing numbers, or balances.

2. Payment Processing (PCI DSS Level 1)

All billing and payment transactions are processed through our authorized Merchant of Record, Lemon Squeezy. We do not store, process, or transmit your credit card or PayPal credentials on our servers. All transactions comply with PCI DSS Level 1 requirements.

3. Artificial Intelligence Security

Document vision parsing is executed via enterprise API instances governed by strict confidentiality terms. Client statement data submitted to our parsing endpoint is not retained or utilized for foundation model training or commercial indexing.

4. GDPR and CCPA Compliance

Under European GDPR and California CCPA regulations, you have full rights regarding your personal information. Because StatementCleaner does not store financial documents post processing, no client statement data remains on our systems to be retrieved or deleted.

5. Contact Information

If you have specific security inquiries or require a Data Processing Addendum, please contact our security team at [email protected].