Privacy
What happens to a statement you upload.
This notice describes the service as it runs today.
What we keep, and for how long
The PDF you upload and the transactions extracted from it are stored to run the conversion and are deleted automatically 24 hours after the task is created. Deleting a task in the workspace removes them earlier.
We keep task status and page counts to run conversions and apply the free page limits. These records do not contain statement content.
If you create an account we keep your email address, sign-in codes and session records. A signed-in session lasts 30 days and is renewed while you use the site. If you sign in with Google, Google tells us your email address and that it is verified; we keep only the address, and a cookie that lasts 10 minutes checks that the sign-in started here. Guests get a cookie that lasts up to 30 days. To apply the free page limits we count free pages per guest cookie, per internet connection and per email inbox. A connection is stored as a keyed hash of your IP address (for IPv6, of its first 64 bits), which is also kept with each guest task; an inbox is stored as a keyed hash of your email address with any +tag removed.
To investigate problems and abuse we keep an activity log of sign-ins and of actions on your tasks and account: the time, the action and its result, task and account references, the email address entered at sign-in, a keyed hash of your IP address, your country and browser type. Entries are deleted after 90 days. The log never contains statement contents, file names, passwords or sign-in codes.
To learn which websites and links bring people to BalancedPDF, we record with each task, and with a new account, how you first arrived in that browser tab: the campaign name in the link you followed (its utm_source and utm_campaign tags) or else the referring website’s domain, and which of our public pages you opened first. Your browser holds this in memory for the open tab only, not in a cookie or browser storage.
If you buy pages or Pro we keep the order, subscription and receipt records (amounts, dates, status and the payment provider’s references) needed for your balance, refunds and accounting.
File names stay in your browser to label your files in the workspace and are removed there when the file expires or is deleted. They are not sent to our servers.
Statements you send us
If a statement fails to convert or doesn’t balance, you can email it to support@balancedpdf.com so we can fix the converter. Only send statements you, and your client, are happy to share. Cloudflare forwards the email to the mailbox we use for support. We use the statement only to find and fix that problem. To reproduce it we convert the statement the same way the live service does, so it goes to the same processors listed below; we don’t share it with anyone else. We delete the email and any copies within 30 days. When we keep a test for the problem, it uses made-up data, not your statement.
Who processes your data
Cloudflare (Cloudflare, Inc., United States) hosts the service. Uploaded files, results and our databases are stored in Cloudflare’s EU jurisdiction; processing may run in Cloudflare data centres outside the EU. Cloudflare Turnstile checks that requests come from a person.
OpenRouter (OpenRouter, Inc., United States) reads each page to extract the transactions using Anthropic’s Claude model. It receives the text of the page, or an image of the page for scanned statements, and passes it to a provider that hosts Claude: Anthropic, Amazon Web Services, Google Cloud or Microsoft Azure, which may process it in the United States or other regions. Every request requires zero data retention and no use of the data for training, so it is only sent to providers that OpenRouter lists as meeting those terms; if none is available the conversion fails. We have not signed a separate data processing agreement with OpenRouter; its terms and privacy policy apply. Do not upload a statement if this is not acceptable to you or your client.
Resend sends sign-in codes from its EU region. It receives your email address and the code.
Google (Google LLC, United States) signs you in if you choose Continue with Google. It shares your email address with us; we don’t receive your Google password.
Paddle (Paddle.com Market Limited, United Kingdom) or Waffo, whichever you choose at checkout, processes your payment as merchant of record. It receives your name, email address, billing address and payment details under its own privacy policy. We receive the purchase, its status and a receipt reference, never your card details.
Optional website analytics
If you allow analytics, Google Analytics uses cookies to measure visits to our public pages: home, pricing, privacy, terms and the conversion guides. It receives the public page path, a shortened referral address, browser and device information, and approximate location. Before sending page information we remove URL fragments and every query parameter except the campaign tags utm_source, utm_medium and utm_campaign.
Analytics is off until you choose to allow it. Your workspace, checkout, uploaded statements, extracted transactions, file names, email address and account details are excluded. Advertising signals and automatic interaction measurement are disabled. You can reject analytics or change your choice using Analytics preferences in the footer; rejecting clears our Google Analytics cookies.
Your choices
Only upload statements you are allowed to process. You can delete a task at any time in the workspace. To ask about your data or to delete your account, email privacy@balancedpdf.com.