Privacy Policy

Statementoy converts bank and credit-card statements into structured data. This policy explains what we process when you use the service, create an account, contact support, or purchase page credits.

Operator and scope

The service is operated by 童锦涛 as an individual operator in China. Public service contact region: 安徽省六安市舒城县 (Shucheng County, Lu'an City, Anhui, China). The service is intended for people who can legally use it in their jurisdiction and is not directed to children under 13. We do not knowingly create accounts for children under 13.

Information we process

We process your email address and account details, uploaded statement files, extracted transactions and page results, edits and exports, usage and credit records, orders and subscriptions, and security or abuse signals needed to operate the service. You may also sign in with Google or GitHub when those options are enabled for Statementoy.

Why we use it

We use this information to provide statement conversion, maintain your account and history, apply page credits, process and support billing, send account emails, prevent abuse, protect the service, and answer support requests.

Service providers

Statement processing may use DeepSeek for extraction assistance and Cloudflare R2 for private document and export storage. Dodo is the current payment and subscription provider. Waffo or Creem may be offered only when the corresponding provider is explicitly enabled and configured for Statementoy; when Waffo is enabled, its hosted processor is Waffo Pancake. An unavailable provider receives no payment request. Resend sends transactional email, and Google or GitHub provide optional sign-in. We send each provider only the information needed for its function. Payment, sign-in, and email providers do not receive your statement content as part of ordinary conversion.

Payment details are entered on the selected provider's hosted checkout. Statementoy does not receive or store complete card numbers or card security codes; it receives order, status, and provider reference data needed to reconcile access and credits.

Sale of personal data

We do not sell personal data. We use service providers for the purposes described above and do not exchange statement content for advertising or unrelated marketing.

Cookies and local storage

The public app uses essential browser storage only: a local language preference, temporary checkout continuation state, and the cookies or session storage needed for authentication, security, and service operation. These controls do not store uploaded statement content in the public demo. No advertising cookies are intentionally used by the public Statementoy app.

Security and international processing

Private storage, account permissions, access checks, expiry cleanup, and deletion controls are used to protect documents. No method of transmission or storage is completely risk-free. Hosting and service providers may process data outside your country, including through DeepSeek, Cloudflare, payment, email, sign-in, or hosting services. The locations and transfer mechanisms depend on the active configuration and each provider's terms; this policy does not promise a particular transfer certification or mechanism.

Retention and deletion

Uploaded documents, extracted results, and related working data are inaccessible after the document's 24-hour expiry window. The application and its worker delete known source, page, and result objects during expiry cleanup; if a cleanup attempt fails, it is retried. After those objects are deleted, task metadata such as account/document identifiers, file name, document state, page counts, processing status, error fields, and other processing fields may remain for up to 90 days; the statement content is stored in the deleted private objects. Account, order, subscription, and payment records are retained as needed for account security, customer support, fraud prevention, and legal or accounting obligations. DeepSeek, storage, email, sign-in, and payment providers may retain data under their own policies.

Your choices

You can use the synthetic sample mode without uploading a document; synthetic samples are not uploaded and do not consume credits. You can request access, correction, deletion, or an explanation of processing where those rights apply to you. For privacy requests, account or data assistance, contact [email protected].

We will verify the request before disclosing or changing account data. You may also contact the data-protection or consumer authority available in your jurisdiction. Account, payment, and security records may need to be retained when required for legal, accounting, fraud-prevention, or service-security reasons.

Changes

We may update this policy when the service or its providers change. The date above identifies the current version.