Privacy Policy
Last updated: June 28, 2026
Statemently ("we", "us"), operated by squidcode, converts bank-statement PDFs into spreadsheet and accounting formats. This policy explains what we collect, how we use it, and the choices you have. Questions: contact us.
The short version
- Your statements are not stored. Uploaded PDFs are processed in memory to extract transactions and are never written to our database or disk.
- To extract the data, the document is sent to our AI processing provider (Anthropic) for the duration of the conversion only.
- We keep conversion metadata (not the statement) and your account.
- We never sell your data.
What we collect
- Account information — your email address, used to sign in and to contact you about your account.
- Uploaded statements — the PDF you upload is held in memory only for the conversion and is then discarded. We do not retain the file or its full contents.
- Conversion metadata — derived, non-document data such as file name, number of rows, timestamps, format, and processing cost. This is what powers your history and our billing.
- Payment information — purchases are handled by our merchant of record, Polar. We do not see or store your full card details; we receive only the status of your purchase.
- QuickBooks connection — if you connect QuickBooks Online, we store the OAuth access and refresh tokens, encrypted at rest, so we can send transactions you choose to push. You can disconnect at any time, which deletes those tokens.
- Usage and device data — basic analytics (pages visited, events, approximate location, browser) via Umami and Google Analytics, and bot-protection signals via Cloudflare Turnstile.
How we use it
- To provide the conversion service and your account history.
- To process payments and prevent abuse.
- To respond to support requests you send us.
- To understand usage in aggregate and improve the product.
Service providers we share with
We share the minimum necessary with providers that help us run the service: Anthropic (AI extraction of the uploaded document), Polar (payments), Intuit / QuickBooks (only if you connect it, and only the transactions you push), Cloudflare (bot protection and delivery), and our analytics providers. These providers process data on our behalf and are not permitted to use it for their own purposes.
Data retention
- Uploaded statements: not retained beyond the conversion.
- Conversion metadata and account data: kept while your account is active.
- QuickBooks tokens: kept until you disconnect or close your account.
Your choices
You can request access to, correction of, or deletion of your account data, and you can disconnect QuickBooks at any time from your account page. To make a request, contact us.
Changes
We may update this policy; we'll revise the date above when we do. Continued use after a change means you accept the updated policy.