Security
How a statement you upload is protected, and the limits you should know about before uploading client data.
This page describes the service as it runs today. The privacy notice is the full account of what we collect and who processes it.
Statements are deleted after 24 hours
The PDF you upload and the transactions extracted from it are deleted automatically 24 hours after the task is created. Deleting a task in the workspace removes them straight away. As a backstop, the bucket that holds uploaded files deletes anything older than 2 days.
File names stay in your browser to label your files and are not sent to our servers. If a file is password-protected, the password is used once to open it and is never stored.
Where your data is stored
Uploaded files, results and our databases are stored by Cloudflare in its EU jurisdiction. Processing may run in Cloudflare data centres outside the EU.
Uploads and downloads go over HTTPS. Files are uploaded straight to storage through a link that only works for that one file and expires shortly after it is issued.
Reading the statement with an AI model
Each page is read by Anthropic’s Claude model through OpenRouter, which passes it to a provider that hosts Claude: Anthropic, Amazon Web Services, Google Cloud or Microsoft Azure. Every request requires zero data retention and no use of the data for training, so it is only sent to providers that OpenRouter lists as meeting those terms. If none is available, the conversion fails rather than going elsewhere.
We have not signed a separate data processing agreement with OpenRouter; its terms and privacy policy apply, and we rely on its routing to enforce the zero-retention requirement. If that is not acceptable to you or your client, don’t upload the statement.
Accounts and sign-in
You can sign in with a one-time email code or with Google. We store sign-in codes and session tokens only as hashes. A code expires after 10 minutes; a session lasts 30 days and is renewed while you use the site. Session cookies can’t be read by scripts on the page and are only sent back to this site.
We never see your Google password. Payments are handled by Paddle or Waffo as merchant of record, so card details go to them, never to us.
Abuse protection and logs
Cloudflare Turnstile checks that guest uploads and email sign-ins come from a person. An activity log of sign-ins and actions on tasks and accounts is kept for 90 days to investigate problems; it never contains statement contents, file names, passwords or sign-in codes.
What we don’t claim
BalancedPDF has no SOC 2 or ISO 27001 certification, and no independent security audit has been carried out. The service is checked by automated tests and by monitoring that converts a made-up sample statement every few hours.
Reporting a problem
If you think you have found a security problem, email support@balancedpdf.com. For questions about your data, email privacy@balancedpdf.com.