Privacy policy

Policy effective date: August 30, 2026.

Who operates the service

Statement2Excel.ai is operated by Jianlong Zhang, acting as an individual / sole proprietor. The operator is based in China. The public contact address is Shenzhen, Guangdong, 518000, China, and the verified privacy contact route is identified on the contact page.

Data the service processes

When you request a conversion, the service processes uploaded PDFs, extracted transaction fields, row-level confidence values, statement-level extraction confidence, reconciliation and review evidence, generated exports, job and abuse-prevention metadata, and support messages. Bank-statement contents are treated as restricted financial data.

Why data is processed

Documents and extracted fields are used to provide conversion, review, export, security, abuse prevention, and support functions requested by the user. Uploaded PDFs, extracted transaction contents, and generated workbooks are not used to train, fine-tune, or improve a machine-learning model. Document contents are not used for advertising or sold.

Storage and retention

Originals and generated artifacts remain in private object storage with a 24-hour default lifecycle. Processing uses Cloudflare infrastructure for the web application, private object storage, queues, and worker execution. Security and audit metadata may follow a separate documented retention period.

Service providers and international processing

Cloudflare provides the application runtime, private object storage, database, queues, bot protection, containers, logs, and network delivery used by the service. Processing can therefore occur outside the operator's country and outside the user's country. The current production storage location is WNAM (Western North America), which is a provider location setting rather than a contractual data-residency guarantee. The service does not sell bank-statement contents or disclose them to advertising networks.

Operational telemetry

Standard web requests can generate technical records needed for availability, security, and abuse prevention. Application logging is restricted to an allowlist of non-document operational fields. Raw document text, filenames, account numbers, names, transaction descriptions, and signed storage URLs are prohibited from routine logs and analytics.

Cookies, browser storage, and analytics

Statement2Excel.ai does not use advertising cookies. The conversion workspace stores an anonymous client identifier in local browser storage for rate limiting and stores an active job identifier, short-lived job access token, and creation time in session storage so a conversion can recover after a refresh. These browser-storage values do not contain the PDF or extracted transaction contents. You can remove them through your browser's site data controls, although doing so can prevent recovery of an active job.

Cloudflare Web Analytics is used for aggregate site and performance measurement. Cloudflare's Web Analytics documentation states that it does not use cookies or local storage to collect usage metrics. When Turnstile or another Cloudflare challenge is enabled for an upload or security event, Cloudflare processes browser and network signals needed to distinguish people from automated traffic and may use security cookies or similar mechanisms when a clearance feature applies. These services are not used for advertising profiles. See Cloudflare's Turnstile documentation and the Statement2Excel.ai security page for the current conversion controls and processor details.

Your choices and requests

Access, correction, deletion, and objection rights depend on applicable law and your location. Privacy questions or deletion requests can be sent through the privacy contact route. Do not attach a bank statement, account number, password, or financial credential to the initial message. Include only the opaque job identifier when it is needed to locate an active conversion.

Children's privacy

The service is not directed to children under 16 and does not knowingly collect their personal data. A parent or guardian who believes a child has submitted personal data can use the privacy contact route to request review and deletion.

Related information

Learn who operates Statement2Excel.ai, review the security and data-handling controls, or read the terms of service. Privacy questions and requests should use the verified route on the contact page.

Policy changes

Material changes will be published on this page with a revised effective date. A change to the document-use, retention, processor, or contact practices must be disclosed before the changed practice is introduced.