Privacy Policy

Scope and operator

BankStatements.us is operated by Edda Corp. It is intended for United States business and professional customers, including accountants, bookkeepers, lenders, and other financial professionals who are at least 18 years old.

Public conversion and checkout are not currently available. This policy states the privacy commitments that apply to the current site and to the service when it launches.

Information we collect

We collect and process the following categories of information:

• Account information, including name, email address, credentials, and account status.
• Documents you are authorized to submit, including filenames, document content, and technical file metadata.
• Extracted transactions, normalized results, reconciliation outcomes, and generated CSV or spreadsheet exports.
• Billing information handled through Stripe when paid plans are available. We do not store complete payment-card numbers.
• Support, privacy, security, and other communications you send to us.
• Service metadata such as IP address, browser and device information, request timing, security events, usage allowances, and abuse-control counters.
• Privacy-minimized product events described in the Analytics section below.

How we use information

We use information only as needed to:

• Create, authenticate, maintain, and support individual accounts.
• Process authorized financial documents and deliver checked results and exports.
• Operate subscriptions, allowances, usage accounting, and customer-requested billing.
• Protect the service, investigate abuse, enforce our terms, and prevent fraud.
• Respond to support, privacy, and security requests.
• Meet accounting, tax, legal, and regulatory obligations.
• Improve reliability and capacity using aggregated or de-identified statistics that cannot reasonably identify a customer or reconstruct document content.

Customer documents and model training

Customers retain ownership of their documents and extracted data. Edda Corp receives only the limited rights needed to process, temporarily store, secure, support, and deliver the service. Customer document content and extracted content are not used for model training or dataset creation without separate affirmative consent. Aggregated or de-identified statistics may be used only when they cannot reasonably identify a customer or reconstruct document content.

How information is shared

We share information only with service providers listed in our Trust Center, when you direct us to share it, when required by law, or in connection with a corporate transaction subject to appropriate confidentiality protections. Providers may use information only to perform services for BankStatements.us.

We do not sell personal information. We do not share personal information for targeted advertising or cross-context behavioral advertising.

United States data residency

BankStatements.us is a United States service. Customer account data, uploaded documents, extracted results, exports, and service records are stored and processed in the United States. Providers that handle customer data are configured for United States processing regions. We do not offer an international data-processing region at launch.

Analytics and advertising

BankStatements.us does not sell personal information or share it for targeted advertising. Product analytics are limited to privacy-minimized basic events. We do not use session recording, broad autocapture, advertising, or cross-site tracking, and we do not send names, email addresses, document content, filenames, extracted data, authentication values, payment details, or sensitive form content in those events. We prefer cookieless or non-persistent anonymous measurement where practical. No cookie banner or preference center is used at launch. We will reassess consent controls before adding persistent analytics cookies, advertising, cross-site tracking, session recording, sensitive capture, or non-United States availability.

Retention and deletion

Uploaded documents and processing artifacts follow the lifecycle described in our Retention & Deletion policy. Results and exports remain available for seven days and may be deleted earlier. Limited content-free billing, entitlement, usage, idempotency, and abuse-control records are kept only for their stated accounting, operational, or security periods. We may retain records longer when required by law, to resolve a dispute, or to enforce an agreement.

United States privacy rights

To request access, correction, portability, or account deletion, email privacy@bankstatements.us. We may verify identity before responding. We aim to respond within 30 days; if a legally permitted extension is needed, we will explain it. There is no self-service account deletion at launch. Available results and exports are deleted promptly after a verified deletion request, while content-free legal and operational records follow their published periods. Portability covers data still held when requested; expired or deleted results cannot be restored. Authorized agents may submit a request where state law permits it, and we will not discriminate against you for exercising an applicable privacy right.

Children and professional use

The service is intended for United States businesses and financial professionals aged 18 or older. It is not directed to children, consumers acting for personal, family, or household purposes, or users outside the United States. Do not submit information about a child unless you are legally authorized and the submission is necessary for a permitted professional purpose.

Policy changes and contact

We may update this policy as the service changes. The page will show the effective and last-updated dates. Material changes receive advance email or in-product notice when practical; a change requiring fresh consent will not rely only on continued use. Questions and requests use the privacy contact listed in the United States privacy rights section.