Overview
StatementParse ("we", "us", "our") operates the statementparse.dev website and the StatementParse API. This policy describes how we collect, use, and protect your information.
Data We Collect
We collect the minimum data necessary to provide our service:
- Account information — Email address and hashed password when you create an account.
- API usage metadata — Timestamps, page counts, detected bank, processing time, and status for each API call. Used for billing, rate limiting, and service improvement.
- Payment information — Processed securely by Stripe. We never see or store your full card number.
PDF Document Handling
This is the most important part:
- PDF files are processed entirely in memory.
- Documents are never written to disk or stored in any database.
- File contents are discarded immediately after parsing completes.
- We do not retain, log, or cache the content of your bank statements.
- We cannot retrieve or reproduce any document after it has been processed.
How We Use Your Data
- To provide and maintain the StatementParse API service.
- To track usage for billing and enforce rate limits.
- To send account-related communications (password resets, billing alerts).
- To improve parsing accuracy and service reliability using aggregate, anonymized metrics.
Data Security
- All API communication is encrypted via TLS (HTTPS).
- API keys are stored as SHA-256 hashes — we cannot see your full key after creation.
- Passwords are hashed using bcrypt via Supabase Auth.
- Our infrastructure is hosted on Railway (API) and Vercel (portal) with standard security practices.
Third-Party Services
We use the following third-party services:
- Supabase — Authentication and database (account data, API key hashes, usage logs).
- Stripe — Payment processing.
- Railway — API server hosting.
- Vercel — Portal hosting and edge functions.
Data Retention
- Account data is retained while your account is active.
- Usage logs are retained for billing purposes and automatically aged out after 12 months.
- You can request account deletion by contacting us at support@statementparse.dev.
Cookies
We use essential cookies only for authentication sessions. We do not use tracking cookies, analytics pixels, or third-party advertising cookies.
Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance.