Privacy Policy

This Privacy Policy pertains to the website and service at bankpdfconverter.com (the "Service"). Capitalized terms not defined here use the definitions given in the Terms of Service.

TLDR: We will never sell or rent your personal information. We acknowledge the private nature of bank-statement data and take steps so that it remains private and secure, including encryption and automatic deletion on a recurring basis.

1. Information Collected

• Account Information. Your email address, which identifies and authenticates your account.
• Payment Information. We never collect or store credit-card data ourselves; all card data is handled by our payment processor, Stripe Inc.
• Uploaded Files. The PDF files you upload in order to be converted.
• Logs & Analytics. IP address, browser/OS details, and usage metrics collected by our analytics provider.

2. How We Use Your Information

• To Provide & Improve the Service. Account management, PDF conversion, technical support.
• Payments. Charging your card via our payment processor and reconciling payments.
• Troubleshooting & Security. Monitor logs for troubleshooting, security, and abuse prevention.
• Analytics. Understand site usage and improve features.

Legal Bases for EEA/UK Users

We process personal data under the following legal bases (GDPR Articles 6(1)(b), 6(1)(f), and 6(1)(c)):

• Contract performance – to provide the Service you request.
• Legitimate interests – to detect fraud, secure our systems, and improve the Service.
• Legal obligations – to comply with tax, accounting, and other statutory duties.

3. Cookies

• Necessary Cookies. Required for login sessions and site functionality.
• Analytics Cookies. Used only for first-party analytics; we do not allow third-party ad cookies.
• Opt Out. You can disable cookies in your browser, but doing so may break functionality such as login access.

4. Sharing & Disclosure

We will never sell or rent your personal information.

We do not share your personal information, except as necessary to provide, maintain, and improve the service you’ve requested.

Each provider acts as a “sub-processor” and may use your data only to deliver services on our behalf.

A current list of sub-processors is available on request via support@bankpdfconverter.com.

5. Retention Periods

• Uploaded Files & Converted CSV & Excel Files. Auto-deleted approximately 72 hours after conversion. You can also delete them via your dashboard. Precise timing of full deletion may vary due to recurring system-maintenance scripts.
• Email Address. Indefinitely to secure access to your account, send account-related emails during the life of your account, and prevent account creation by blocked users.
• Logs & Analytics. Retained up to 90 days, then anonymized or purged.

6. Security Summary

• Encryption in Transit. All data sent to and from our site is protected via HTTPS/TLS.
• Encryption at Rest. All database data is encrypted at rest using industry-standard 256-bit AES encryption.
• Access Controls. Strict authentication and authorization limit internal access.
• Data Breach Notification. If a data breach affects your personal data, we will notify you and regulators as required by law.

7. International Transfers

All data is stored and processed in the United States. We do not transfer your personal data to countries outside the U.S.

8. Your Privacy Rights (Access & Deletion)

• Self-Service. Delete uploaded files or close your account at any time via the dashboard—no formal request needed.
• Other Requests. Email support@bankpdfconverter.com; we aim to respond within 24 business hours.

9. Children’s Privacy

The Service is for adults (18 years or older) only. We do not knowingly collect data from anyone under 18.

10. Marketing Communications

We currently do not send newsletters or marketing emails. If we do in the future, every message will include an unsubscribe or opt out-link.

11. Questions?

Email support@bankpdfconverter.com with any privacy questions.

12. Changes to This Policy

We may update this policy whenever our practices change. We will post the new “Last updated” date at the top.

Addendum A: California Privacy Rights (CCPA/CPRA)

1. “Do Not Sell or Share” Statement

We do not sell or rent your personal information. We share information only as necessary to provide, maintain, and improve the Service you’ve requested.

2. Categories of Personal Information Collected in the Past 12 Months

3. Your California Rights

You may Know/Access, Delete, Correct, and Opt-Out of Sale or Sharing (not applicable as we do not sell/share), and you are protected from Non-Discrimination for exercising these rights.

4. How to Exercise Your Rights

Email support@bankpdfconverter.com from the address associated with your account. We will verify your identity and respond within 45 days.