Privacy Policy

1. Introduction

Welcome to Statement PDF Converter ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at www.statementpdfconverter.com (the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address: Used for account creation, authentication, and communication
• Name: Optional, for personalization
• Password: Securely hashed and stored by Supabase

2.2 Usage Data

We automatically collect certain information when you use the Service:

• Conversion history: Records of your PDF conversions (for authenticated users only)
• IP address: Collected ONLY for anonymous users to enforce rate limits, automatically deleted after 30 days
• Browser and device information: Collected through analytics tools
• Usage statistics: Pages visited, features used, time spent on site

2.3 Files You Upload

IMPORTANT: Your PDF files are:

• Processed entirely in memory - never stored on our servers
• Temporarily uploaded to Google's secure servers for AI processing via Gemini API
• Immediately deleted from Google's servers after conversion completes
• Never shared with third parties or used for any purpose other than your conversion

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your PDF to CSV conversions
• Manage your account and conversion history
• Enforce rate limits and prevent abuse
• Improve and optimize the Service
• Communicate with you about service updates or support
• Analyze usage patterns and trends
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services:

4.1 Google Gemini AI

Your PDF files are temporarily processed using Google's Gemini AI API. Files are uploaded to Google's servers for processing and immediately deleted after conversion. Google's use of your data is governed by their Privacy Policy.

4.2 Supabase

User authentication and database services are provided by Supabase. Your account data is securely stored and encrypted. See Supabase Privacy Policy.

4.3 Vercel

Our Service is hosted on Vercel. See Vercel Privacy Policy.

4.4 Analytics

We use Google Analytics and Microsoft Clarity to analyze usage patterns and improve the Service. These tools may use cookies to collect anonymous usage data.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential cookies: Required for authentication and service functionality
• Analytics cookies: Google Analytics and Microsoft Clarity for usage analysis
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.

6. Data Retention

• PDF files: Never stored, processed in memory only
• Conversion history: Retained until you delete it or close your account
• IP addresses: Retained for 30 days (anonymous users only), then automatically deleted
• Account data: Retained until you request deletion or close your account

7. Your Privacy Rights

Under GDPR and other privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your data (via "Clear History" in Dashboard)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data
• Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us.

8. Data Security

We implement appropriate technical and organizational security measures to protect your data:

• SSL/TLS encryption for all data in transit
• Encrypted storage for account data (via Supabase)
• Immediate deletion of uploaded files after processing
• Regular security updates and monitoring
• Access controls and authentication

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us.