Privacy policy

1. What happens to your statement

Your PDF is read directly in your browser: the file itself is never uploaded to our servers and is never stored. Only the extracted text layer is sent to our server, forwarded to our AI provider to structure the transactions, and discarded once the result is returned. Neither the text nor the extracted transactions are written to any database.

The converted table stays in your browser until you close or reload the page, and is in any case gone within 1 hour. Statement contents and account numbers are never written to our logs.

2. Data we store when you have an account

Email address, plan, subscription status, monthly page usage, and conversion metadata only: date, page count, bank name, currency and number of transactions. No transaction lines, no balances, no account numbers.

For anonymous visitors we store a one-way hash of the IP address together with a counter, solely to enforce the free-conversion limit and rate limits. The raw IP is never stored, and these records are deleted automatically within 24 hours.

3. Purpose and legal basis

Providing the conversion service you requested (performance of a contract), enforcing quotas and preventing abuse (legitimate interest), and billing subscriptions (performance of a contract).

4. Processors

Infrastructure and database hosting (application host), the AI provider used to structure statement text, Stripe for subscription payments and invoicing (Stripe processes your billing details directly; we never see your card number), and, when enabled, an email provider for transactional emails (account confirmation, password reset, welcome and subscription confirmation).

5. Retention

Statement files and extracted data: never stored, gone within 1 hour. Anonymous usage counters: up to 24 hours. Account data and conversion metadata: kept until you delete your account, which erases them immediately.

6. Your rights

You may access, rectify, erase, export or restrict the processing of your personal data, and lodge a complaint with your supervisory authority. From Settings you can download all your data as JSON and delete your account and all associated data yourself. For any other request, contact elfayad@managementandco.fr.

7. Cookies and trackers

Relevio uses no advertising cookies, no analytics and no third-party trackers. The only browser storage used is strictly necessary: your authentication session and a local marker for the free anonymous conversion. Because no non-essential cookies are set, no cookie banner is required.