Privacy policy

Policy effective date: August 30, 2026.

Who operates the service

Statement2Excel.ai is operated by Jianlong Zhang, acting as an individual / sole proprietor. The operator is based in China. The public contact address is Shenzhen, Guangdong, 518000, China, and the verified privacy contact route is identified on the contact page.

Data the service processes

When you request a conversion, the service processes uploaded PDFs, extracted transaction fields, confidence and reconciliation evidence, generated exports, job and abuse-prevention metadata, and support messages. Bank-statement contents are treated as restricted financial data.

Why data is processed

Documents and extracted fields are used to provide conversion, review, export, security, abuse prevention, and support functions requested by the user. Document contents are not intended for advertising or sale.

Storage and retention

Originals and generated artifacts remain in private object storage with a 24-hour default lifecycle. Processing uses Cloudflare infrastructure for the web application, private object storage, queues, and worker execution. Security and audit metadata may follow a separate documented retention period.

Service providers and international processing

Cloudflare provides the application runtime, private object storage, database, queues, bot protection, containers, logs, and network delivery used by the service. Processing can therefore occur outside the operator's country and outside the user's country. The current production storage location is WNAM (Western North America), which is a provider location setting rather than a contractual data-residency guarantee. The service does not sell bank-statement contents or disclose them to advertising networks.

Operational telemetry

Standard web requests can generate technical records needed for availability, security, and abuse prevention. Application logging is restricted to an allowlist of non-document operational fields. Raw document text, filenames, account numbers, names, transaction descriptions, and signed storage URLs are prohibited from routine logs and analytics.

Your choices and requests

Access, correction, deletion, and objection rights depend on applicable law and your location. Privacy questions or deletion requests can be sent through the privacy contact route. Do not attach a bank statement, account number, password, or financial credential to the initial message. Include only the opaque job identifier when it is needed to locate an active conversion.

Policy changes

Material changes will be published on this page with a revised effective date. A change to the document-use, retention, processor, or contact practices must be disclosed before the changed practice is introduced.