Privacy Policy

The short version.

• To read a statement, we send the entire PDF to our AI provider, Anthropic. That includes your name, address, full account number and an image of every page.
• Anthropic keeps it for 30 days, and it doesn’t use it to train its models.
• We don’t store your statements. They, and everything the app works out from them, stay in a folder on your own device.
• When you ask for a written report, the transaction details are sent through a filter first, which removes identifiers it can recognize.
• We keep only your email address, your subscription status, usage counts, and a record of the terms and notices you’ve accepted.
• We set no cookies of our own, and we don’t sell your data.

1. Information we collect

• Account information. Your email address and sign-in details, and your name if you give one at sign-up, are handled by our sign-in provider, Clerk. Clerk manages your password, and we never see it. We keep your email address and your Clerk account ID. We don’t store your name; the app uses it only to greet you and to remove it from anything sent for a report.
• Payment information. If you subscribe, you enter your card details on Stripe’s own checkout page, not ours. We give Stripe your email address. In return we keep a Stripe customer reference and your subscription status. We never receive or store your card number, or any part of it.
• Usage information. We count how many statements you have analyzed and how many reports you have generated. We also keep the dates of your trial and paid period.
• Acceptance records. When you accept these Terms and this Privacy Policy at sign-up, and when you confirm the statement-send notice in the app (section 2), we record which version you accepted and when. This is our proof of your consent.
• Statement data. See section 2. We do not store it.
• Problem reports. If you send us feedback or a problem report, we receive what you write and your email address. If you choose to attach a diagnostic report, we also receive that (see section 2).
• Technical information. Our hosting provider, Vercel, receives your IP address, browser type and the page requested, as any web host does. Every page also loads Clerk’s sign-in script from clerk.statementlock.com, so Clerk receives the same details. Clerk’s service runs through Cloudflare’s network.

2. How your statements are handled

This is the most important part of this policy, so it is precise. Your statements are used in two different ways, and they are handled differently.

Reading a statement. When you add a statement, the app sends the original PDF file, unchanged, to Anthropic, the company that provides our AI. Anthropic reads it and returns the transactions and totals. Nothing in the file is removed first. This means Anthropic receives:

• your name and address;
• your full account number, and any routing number;
• every transaction on the statement;
• an image of every page.

The file passes through our server on its way to Anthropic. Our server does not store the file, and it does not record the file’s contents in its logs.

The app then checks Anthropic’s figures against the statement’s printed totals. That check runs on your own device.

Before you send a statement for the first time, the app tells you what will be sent and asks you to confirm. When you confirm, we record in our database which version of that notice you accepted and when; the notice re-appears for a fresh confirmation whenever its wording changes. Reading a statement requires sending it. If you don’t want a statement sent, don’t add it to the app. There is no way to analyze a statement without sending it.

Statements we don’t send. The app checks three things before sending. If a statement fails any of them, it is not analyzed, and nothing from it leaves your device:

• it appears to be a brokerage or investment statement;
• it is password-protected;
• it is too large to send.

The brokerage check can occasionally refuse an ordinary bank statement by mistake.

A scanned statement (a picture of each page, with no text the app can check) can’t be recognized as a brokerage or investment statement before it is sent. If a scanned statement turns out to be one, it is sent to Anthropic and read, then refused: no results are returned, and it doesn’t count toward your plan’s statement limit. Like any statement that is sent, Anthropic’s retention applies (section 5).

Writing a report. When you ask for a written report, the app sends Anthropic:

• your transactions (date, amount, category and description);
• the household details you have entered in the app;
• your action items.

Before sending, the app runs this information through a filter. The filter removes account numbers, Social Security numbers, phone numbers, email addresses and account-holder names it can recognize. No filter is perfect, and descriptions can still contain merchant names, places, dates and amounts.

Where results are kept. The analyses, reports, a copy of each statement, and your settings are saved as ordinary files in the folder you chose on your device. They are not saved in our database.

Problem reports. If you send a problem report, you can attach a diagnostic report. It contains:

• your browser and screen details;
• counts of items in the app;
• recent error messages and app log lines.

Before it is sent, the log lines go through the same filter described above, and file names are replaced with stand-in names. The report is delivered to us by email through Resend, our email provider, and a copy is sent to you.

3. How we use your information

We use your information to:

• provide the Service;
• create and manage your account;
• process subscription payments (through Stripe);
• send emails about your account, such as a welcome message and trial reminders (through Resend);
• answer your support requests and problem reports;
• keep the Service secure;
• meet our legal obligations.

We do not use your information for advertising, and we do not sell it.

4. Service providers

We use these companies to run the Service. Each receives only what it needs:

We do not sell your personal information. Beyond these providers, we share it only:

• to comply with the law, legal process or an enforceable request from a public authority;
• to enforce our Terms, or to protect the rights, safety or property of our users, the public or Makerlow LLC;
• if Makerlow LLC is ever part of a merger, acquisition or sale of assets, with the parties to that transaction — in which case this policy continues to apply to your information, and we will tell you before your information becomes subject to a different one.

5. Our AI provider’s retention

Anthropic’s own policies decide how long it keeps what we send. We cannot shorten them. Under our account’s current settings:

• Anthropic keeps what we send for 30 days;
• during that time, Anthropic may access it for safety and security purposes;
• if Anthropic’s systems flag content under its usage policies, Anthropic may keep that content for up to 2 years;
• Anthropic does not use it to train its models.

Deleting a statement from the app, or deleting your account, does not remove anything Anthropic already holds. That copy is deleted on Anthropic’s own schedule.

6. How long we keep your information, and deleting it

Your account. We keep your account and subscription records while your account exists. If your account has had no sign-in for 24 months, we may delete it and its records after emailing you notice at the address on your account.

Deleting your account. You can’t delete your account yourself in the app yet. To delete it, email support@statementlock.com from the address on your account. We will then:

• delete your account with Clerk;
• delete your record from our database;
• if you have a subscription, cancel it.

What deleting your account doesn’t remove:

• Statements already sent to Anthropic. They stay on Anthropic’s schedule (section 5).
• Stripe’s payment records. Stripe keeps these to meet its own legal obligations.
• Your acceptance records. We keep the record of which document versions you accepted, and when, as evidence of your consent while you had an account.
• Copies held by our providers for a limited period. These include backups and email logs, and they are kept under each provider’s own retention rules.
• Your own files. They are on your device, not ours (below).

Your statements and results. These are ordinary files in the folder you chose, so you control them. You can delete them yourself, either in the folder or with the delete controls in the app. Clearing your browser’s data doesn’t remove them, because they are files on your device. Deleting your account doesn’t remove them either.

7. Your choices and rights

You can ask to see, correct or delete the information we hold about you by emailing support@statementlock.com. That information is the account record described in section 1. Depending on where you live, you may have more rights, such as the right to receive a copy of your data. We will respond as the law requires.

The statements, analyses and reports on your device are in your hands already. We don’t hold copies of them.

8. Cookies and browser storage

Cookies. StatementLock’s own code sets no cookies. Every page loads the sign-in service run by Clerk, our sign-in provider, and even before you sign in, that service sets these cookies:

• __cf_bm is set by Cloudflare, whose network delivers Clerk’s service. It helps tell real visitors from automated traffic, and it lasts 30 minutes.
• _cfuvid is set by Cloudflare. It helps apply traffic limits fairly to visitors who share a network, and it lasts until you close your browser.
• __client and __client_uat are set by Clerk. They let the sign-in service tell whether you are signed in, and keep you signed in once you are. The second may appear with a short code added to its name.

The Cloudflare cookies and __client are set on Clerk’s sign-in address, clerk.statementlock.com. __client_uat is set on statementlock.com. After you sign in, Clerk may set further cookies to keep you signed in. All of these are used only for signing in and security.

We use no advertising, analytics or tracking cookies, and no tracking of any kind. Because we don’t track you, there is nothing for your browser’s “Do Not Track” or similar signals to turn off, and we don’t respond to them.

Browser storage. The app stores a few items in your browser:

• The demo tour. One item records that you have seen the guided tour on the demo page.
• Light or dark mode. One item remembers which you chose, so each page opens in it. Once you’ve chosen a folder, the same choice is also saved in the settings file in that folder.
• Your folders. The app remembers which folder you chose for your data, and which folder it reads your statement PDFs from. This means you don’t have to pick them again each visit. Your browser keeps these permissions, and they don’t contain your files.

Files in your folder. Everything else the app saves goes into the folder you chose:

• copies of your statements;
• the analyses and reports;
• your categories, account names, preferences and household details;
• a note that you have seen the notice in section 2.

9. Security

We use encryption (HTTPS) for everything sent between your browser, our servers and our providers. We also rely on established infrastructure providers. Your statements and results stay on your device, so their security also depends on your device. No method of sending or storing data is completely secure, and we can’t guarantee absolute security.

10. Children

The Service is for adults aged 18 and over, and it isn’t directed to children. We don’t knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. When we do, we will post the new version here with a new effective date. If a change materially affects what we send or keep, we will tell you before it applies to you:

• in the app, before your next statement is sent under the changed policy; and
• by email, if you have an account.

12. Contact us

Questions about this policy: support@statementlock.com.