Your statements stay on your computer; only de-identified text is sent to the AI. Here's exactly what happens:
• PDF files are stored in your chosen local folder — not uploaded anywhere
• Transaction text is stripped of personal information (account numbers, SSNs, phone numbers, email addresses) before any AI processing
• The AI sees only sanitized merchant names, dates, and amounts — never your name, address, or account details
• AI calls are stateless — nothing is stored on the server. The server acts as a pass-through to add the API key, then forgets everything
• Rules, categories, action items, and reports are stored locally in your folder
• No analytics, no tracking, no cookies (other than your access code)
More guides