Privacy Policy

Effective date: July 25, 2026

The short version: ReconCSV converts your bank-statement PDFs locally, inside your own web browser. Your statement files are never uploaded to our servers. We built the product this way on purpose — the most private way to handle a financial document is to never receive it in the first place.

This page explains what little data we do collect, why, and the choices you have. It is provided for transparency and is not legal advice.

What we collect

We collect only what is needed to run and improve the service:

• Account email — only if you voluntarily join our waitlist or register for an account. Used to contact you about the product and, later, to manage your subscription.
• Basic usage counters — aggregate numbers such as how many pages you converted on a given day. These counters contain no file contents, no file names, and no transaction data.
• Standard server logs — when you load our website, our hosting provider records the usual technical log entries (IP address, browser type, pages requested, timestamps). These are used for security, debugging, and abuse prevention.

What we never collect

For the standard converter, the following never reaches us — architecturally, not just by policy:

• Your bank-statement PDF files or any pages from them
• Any transaction data: dates, amounts, payees, balances, account numbers
• The CSV, Excel, or QBO files you export

Because parsing happens in your browser, we have no server-side code path that could receive your statement during a standard conversion. We could not sell, leak, or lose your statement data even if we wanted to — we never have it.

How the in-browser converter works, technically

When you open a PDF in ReconCSV:

1. Your browser loads our JavaScript application (hosted on Vercel).
2. When you select a PDF, the file is read by JavaScript running on your device, using the browser's File API. The bytes are parsed in browser memory by our extraction engine.
3. The extracted transactions are reconciled and rendered on your screen, still entirely within the browser tab.
4. When you export, the CSV/Excel/QBO file is generated in browser memory and saved directly to your downloads folder.

No network request carries your file or its contents. You can verify this yourself: open your browser's developer tools, watch the Network tab while converting, and you will see no file upload. Once the page has loaded, the converter even works with your Wi-Fi turned off.

Cookies and localStorage

We do not use advertising or cross-site tracking cookies. We use your browser's localStorage for one thing: the free-tier daily page counter. The count of pages you have converted today lives in your browser, on your device — not on our servers. Clearing your browser storage resets it; using another browser or device gives you a separate counter. We may also use strictly necessary cookies or storage for site preferences and security.

Optional cloud AI feature (upcoming — not yet enabled)

Status: planned, optional, and off by default. Nothing in this section applies today.

Some bank statements arrive as scanned images that cannot be parsed locally. For these, we plan to offer an optional cloud AI conversion feature. If and when it launches, it will work as follows:

• You must explicitly choose it per file — local conversion remains the default.
• The PDF is uploaded over TLS, processed in memory, and the original file is deleted immediately after processing.
• Any generated exports are retained for no more than 24 hours so you can download them, then deleted.
• We will use AI API providers under zero-retention terms, and your documents will never be used to train AI models — neither by us nor by our providers.

We will update this policy and announce the feature before it becomes available.

Subprocessors and service providers

We work with a small set of providers. Those marked "when enabled" apply only if the corresponding feature is active:

Payments are processed entirely by Paddle as Merchant of Record — we never see or store your card number.

Data retention

• Waitlist/account email — kept until you ask us to delete it or unsubscribe.
• Usage counters — aggregate counts only; the daily counter itself lives in your browser and resets daily.
• Server logs — retained for a limited period per our hosting provider's standard practices, then rotated or deleted.
• Cloud feature files (future) — originals deleted immediately after processing; exports deleted within 24 hours.

Your rights

Regardless of where you live, you may:

• Access the personal data we hold about you (essentially your email address, if you gave it to us).
• Delete it — email us and we will remove your email from our systems.
• Unsubscribe from product emails at any time via the link in any message.

To exercise any of these, email [email protected]. We aim to respond within a few business days. If you are in a jurisdiction with additional statutory rights (such as the EEA/UK under GDPR or California under CCPA/CPRA), we honor those rights; given how little data we hold, most requests are simple to fulfill.

Children's privacy

ReconCSV is a business productivity tool not directed at children under 13 (or under 16 in the EEA), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the effective date above and post the new version on this page. For material changes — such as enabling the optional cloud feature — we will provide more prominent notice in advance.

Contact

Questions, requests, or concerns about privacy: [email protected]

ReconCSV is operated under the laws of the State of Delaware, USA.