Privacy

Bank-statement data is sensitive financial information and we treat it that way.

• We redact before we store. Card numbers, IBANs, sort codes, long account numbers and email addresses are removed from descriptors before anything is saved or logged.
• We never ask for bank credentials. StatementDecoder works from files you export yourself (PDF, scanned PDF, CSV, Excel, OFX or a photo) or text you paste. We do not connect to your bank account.
• Anonymous lookups are retained for up to 90 days (configurable) to improve descriptor coverage, then deleted automatically.
• Uploaded statement files are deleted within 24 hours on every plan. Analysed reports stay in your dashboard for your plan's retention period — 24 hours on Free, 90 days on Pro, 1 year on Business — and you can delete any statement instantly from My statements.
• Logs never contain raw statement content. Only event names, identifiers and confidence metrics are logged.

Questions? Email hello@statementdecoder.com.