Privacy Policy
Last updated: June 2026
1. Data Controller
This Privacy Policy is prepared by clkr.work, the operator of the Bank Statement Parser service at bank-statement-parser.clkr.work. Your personal data is processed as described in this policy.
2. Your PDF Files
Uploaded PDF files are handled in two scenarios: (A) Recognized bank formats: processing occurs entirely in server memory and the PDF is permanently deleted as soon as processing completes. Nothing is written to disk. (B) Unknown formats: the PDF is temporarily stored on encrypted server disk for automated format learning and is permanently deleted when processing completes (typically within 24 hours). In both cases, your PDF content is never shared with any third party.
3. OCR Processing
Scanned or image-based PDFs are processed using the Tesseract OCR engine running locally on our server. During OCR processing, your PDF content is not transmitted to any external service or third party.
4. Account Information
When you create an account, your name, email address, and PBKDF2-hashed password are stored. We do not store card numbers, IBANs, or payment details.
5. Payment Data
Paid plan payments are processed by Paddle (Paddle Payments Ltd.). Your card and payment information is stored solely in Paddle's secure systems and is never shared with us. For Paddle's privacy policy, see: paddle.com/legal/privacy
6. Usage Data
Usage statistics such as page counts processed, API call timestamps, and bank keys are retained linked to your account. This data is used for quota management, billing, and service quality purposes. It is not shared with third parties.
7. Cookies and Tracking
Only an httpOnly secure session cookie is used for authentication. No third-party tracking or marketing cookies are used. Anonymous page-view statistics are collected via PostHog, which does not collect personal data.
8. Data Security
All data transmission is protected by TLS encryption. Passwords are hashed with PBKDF2. Temporary PDF storage uses encrypted disk partitions. Reasonable technical measures are in place to protect data; however, no system is 100% secure, and the Provider accepts no liability for damages resulting from unauthorized access by third parties.
9. Data Retention
Account data is retained until account deletion, then permanently deleted within 30 days. Usage logs are retained for 2 years. Temporary PDF files are deleted within 24 hours. Payment records are retained by Paddle under applicable legal obligations.
10. Your Rights
You may request access to, correction, deletion, or portability of your personal data by emailing support@bank-statement-parser.clkr.work. Requests will be responded to within a reasonable time (no later than 30 days).
11. Policy Changes
This policy may be updated without prior notice. Registered users will be notified by email of material changes. The current policy is always published on this page.
12. Contact
For privacy-related requests: support@bank-statement-parser.clkr.work