← Back to home

Privacy Policy

Last updated: May 2026

BankXL ("we", "us", "our") respects your privacy. This policy explains what we collect, why we collect it, and how we handle your data when you use our service.

1. What we collect

Account information

  • Email address (required to sign in)
  • Full name (optional, used for invoices)
  • If you sign in with Google: your Google account email and basic profile info

Billing information

Stripe handles all payments. We never see or store your credit card or bank details. We store your Stripe customer ID and subscription status only.

Conversion metadata

For each conversion we store:

  • Filename of the uploaded PDF
  • File size in bytes
  • Number of pages and transactions extracted
  • Bank name (auto-detected, optional)
  • Processing duration and status

2. What we do NOT store

We do not store the PDF files you upload. Files are processed in server memory and discarded the moment the conversion completes (success or failure). Nothing is written to disk.

We do not store the extracted transactions. Transactions are returned to you in the output file (Excel/CSV/JSON/Tally) and never saved on our servers.

We do not train AI models on your data. Your statements are not used for any training, analytics, or sharing purposes.

3. Third-party services

  • Supabase — authentication and database (hosted in EU/US).
  • Stripe — payment processing (PCI-DSS compliant).
  • Google AI / Gemini — used to extract transactions from PDFs. Files are sent to Google for processing. Per Google's policy, free-tier API requests may be retained for up to 48 hours for abuse prevention. Paid Gemini API usage is not retained. We monitor this and will move to a fully zero-retention provider if Google policies change.
  • Vercel — hosting infrastructure.

4. Cookies

We use only essential cookies for authentication (Supabase session tokens). No tracking, analytics, or advertising cookies.

5. Your rights

  • Access — request a copy of all data we have about you
  • Deletion — request permanent deletion of your account and all associated data
  • Correction — update incorrect personal information from your dashboard
  • Export — download your conversion history as JSON

Email privacy@banlxlai.com for any of these requests. We respond within 7 days.

6. Children

BankXL is not intended for use by individuals under 18.

7. Changes to this policy

We will notify users by email of any material changes at least 14 days before they take effect.

8. Contact

Questions? Email privacy@banlxlai.com or write to us at our registered address (provided on request).