Statement AI is live  ·  Reconciling Canadian PDFs to the cent
Legal

Privacy Policy

Last updated

This Privacy Policy explains how Balancely (“we”, “us”) collects, uses, and protects your information when you use our service to convert bank and credit-card PDF statements into Excel workbooks.

1. Information we collect

We collect the minimum information necessary to operate Balancely:

  • Account information. Email address and a hashed password when you create an account.
  • Statement data. Transactions, balances, dates, and metadata extracted from PDFs you upload.
  • Usage data. Pages visited, features used, and basic device information (browser type, IP address) for security and product improvement.
  • Billing information. If you subscribe to a paid plan, payment is processed by our payment provider; we receive a transaction reference and your billing email but never your card number.

2. How we use information

We use the information we collect to:

  • Provide the conversion service and deliver workbooks to your account.
  • Maintain your statement history so you can re-download past conversions.
  • Detect abuse, prevent fraud, and protect the integrity of the service.
  • Send transactional emails (sign-up confirmation, conversion ready, billing receipts).
  • Improve parser accuracy and reconciliation logic in aggregate.

We do not sell your information, and we do not use it to train third-party AI models.

3. How we handle your PDFs

Your uploaded PDFs are processed in memory and discarded as soon as the conversion completes. We do not store the original PDF bytes after a successful conversion. We retain only the parsed transaction data so your history page works.

When a parse fails or is flagged for manual review, we may temporarily retain the PDF for up to 14 days to debug the issue, after which it is deleted. You can request immediate deletion at any time from your account settings.

4. Sharing and third parties

We share information only with the service providers that make Balancely work, and only to the extent necessary:

  • Cloud hosting and database. For storing parsed transaction data and serving the application.
  • AI extraction provider. For statements that fall back to our Statement AI extractor, the PDF text content is sent to our LLM provider for the duration of the extraction. The provider does not retain it after the request completes.
  • Payment processor. For handling subscription payments.
  • Error monitoring and analytics. We use limited error monitoring to detect bugs. PII is scrubbed before transmission.

We may also disclose information if required by Canadian or applicable law, or to protect our rights and the safety of our users.

5. Data retention

Parsed transaction data is retained according to your plan's history-retention window (30 days on Free, 1 year on Pro, 7 years on Business). Account information is retained while your account is active. When you delete your account, all parsed transaction data is deleted within 30 days; backups are purged within 90 days.

6. Security

We use industry-standard practices to protect your information: TLS for data in transit, encryption at rest for parsed data, hashed passwords, and limited internal access on a need-to-know basis. No system is perfectly secure, but we treat your statement data with the seriousness it deserves.

7. Your rights

Subject to applicable law (including Canada's Personal Information Protection and Electronic Documents Act), you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your account and associated data.
  • Export your parsed transaction data in CSV format.
  • Withdraw consent and stop using the service at any time.

To exercise any of these rights, contact us at the address below.

8. Cookies and analytics

We use a single first-party session cookie to keep you signed in. We do not use third-party advertising cookies, and we do not track you across other sites. Lightweight first-party analytics measure aggregate usage to help us prioritize improvements; no cross-site profile is built.

9. Children

Balancely is intended for adults. We do not knowingly collect information from anyone under the age of majority in their jurisdiction. If you believe we have, please contact us so we can delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top and, for material changes, notify you by email or in-app banner before the change takes effect.

11. Contact

Questions, requests, or complaints can be sent to privacy@balancely.ca. We aim to respond within 5 business days.

See also our Terms of Service.