Privacy Policy
Last updated: 9 September 2026
Who we are
StatementTable ("we") is an independently operated service based in Türkiye. Contact: support@statementtable.com (the operator's legal identity is provided on request and on invoices issued by our merchant of record). We are the data controller for the processing described here. Payments are processed by our merchant of record, Polar Software Inc. (USA), which is the seller of record and an independent controller for billing data.
What we process and why
| Data | Purpose | Retention |
|---|---|---|
| The PDF statement you upload and the transactions extracted from it | To perform the conversion you request (contract) | Held in memory only for the duration of your request (typically under two minutes) and discarded when the response is sent. We do not write your file or its contents to disk or a database. |
| A salted hash of your IP address and the number of pages converted today | To enforce the free tier and prevent abuse (legitimate interest) | 48 hours |
| Anonymous usage counters: page count, document type, success/failure, model used, cost | Service statistics (legitimate interest) | Indefinitely; contains no personal data |
| Your license key (paid users) | To check and deduct credits (contract) | Stored in your browser only (local storage); verified against Polar on each use |
| Email address, name, billing country and purchase details | Purchasing credits, invoices, license key delivery | Collected and stored by Polar under Polar's privacy policy; we see purchase records to support you |
| Support emails you send us | To answer you | Up to 12 months |
Processors
- Anthropic, PBC (USA) — the AI model that reads your statement runs on the Anthropic API. Anthropic does not use API inputs to train its models. Anthropic may retain API inputs and outputs for a limited period (up to 30 days) solely for trust-and-safety monitoring, after which they are deleted. Data may be processed in the United States.
- Cloudflare, Inc. — hosting, network security, bot protection (Turnstile), and email routing.
- Polar Software Inc. — merchant of record: checkout, invoicing, tax, license keys.
- Resend, Inc. — outbound transactional and support email.
We do not sell personal data, do not use advertising trackers, and do not run third-party analytics scripts on this site.
International transfers
Processing takes place in the EU/EEA, the United Kingdom, the United States and Türkiye. Transfers rely on the processors' standard contractual clauses and, for Türkiye, on explicit consent or the contractual basis permitted by the Personal Data Protection Law (KVKK, Law No. 6698).
Your rights
Under the GDPR, the UK GDPR and KVKK you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interest. Because we do not retain statement contents, deletion requests generally concern support emails and purchase records held by Polar. Email support@statementtable.com; we respond within 30 days. You may also complain to your supervisory authority (in Türkiye: KVKK Kurumu).
Security
All traffic is encrypted (TLS). Statement contents are never logged. Access to infrastructure requires two-factor authentication. We review our security controls before each release and at least monthly.
Children
The service is intended for adults and businesses; we do not knowingly process data of children under 16.
Changes
We will post changes on this page with a new "last updated" date.