Privacy Policy
Last updated: May 12, 2026
1. What we collect
Account information. If you create an account, we store your email address and subscription status in Supabase, our authentication and database provider. We never store passwords directly; authentication is handled by Supabase Auth.
Uploaded statements. When you upload a PDF, the file is processed entirely in memory on our server. The raw PDF is never written to disk or stored in any database. It is discarded immediately after text extraction.
Extracted transactions. The transactions parsed from your statement are stored temporarily in our database so you can review and edit them before exporting. These are permanently deleted the moment you click Export. No exceptions, no backups.
Guest email. If you export without an account, we ask for your email to send a deletion receipt. We use it for that one email only and do not send marketing.
Payment information. Billing is handled entirely by Stripe. We never see or store your card number, CVV, or banking details. Stripe is PCI-DSS compliant.
2. How we use your data
We use your information solely to provide the service:
- To parse and categorize your bank statement transactions
- To generate your Excel or Google Sheets export
- To send a deletion receipt confirming your data was removed
- To authenticate you and manage your subscription
We do not use your data for advertising, profiling, or sale to third parties. Ever.
3. AI processing (Claude)
Transaction categorization is powered by Claude AI (Anthropic). Before any text is sent to Claude, we strip account numbers, card numbers, routing numbers, and Social Security Numbers using pattern-matching. Only anonymized transaction descriptions and amounts are transmitted.
Anthropic does not use API request data to train its models. Your data is not retained beyond the scope of the API request. You can review Anthropic's privacy policy at anthropic.com/privacy.
4. Data storage and deletion
PDFs: Never stored. Processed in memory and discarded immediately.
Transactions: Stored only while you are actively reviewing. Permanently deleted on export. If you never export, they remain until you delete your account or we clean up inactive sessions.
Account data: Retained while your account is active. When you delete your account, your profile, upload history, and all associated transaction data are permanently deleted.
Backups: Supabase maintains database backups for disaster recovery. Deleted records are purged from backups on Supabase's standard backup rotation schedule.
5. Third-party services
We use the following services to operate AJParse:
- Supabase: authentication and database (US-based)
- Anthropic (Claude): AI inference for transaction parsing
- Stripe: payment processing
- Resend: transactional email (deletion receipts only)
- Vercel: hosting and serverless functions
Each of these providers processes only the data necessary to perform their function.
6. Cookies and tracking
We use a session cookie set by Supabase to keep you logged in. We do not use advertising cookies, third-party tracking pixels, or analytics that identify individual users. No data is shared with Google Analytics, Meta, or similar ad platforms.
7. Your rights
You can:
- Export your data at any time from the review page
- Delete your account and all associated data from account settings
- Request a copy of what we hold about you by emailing us
For requests, email us at support@ajparse.com. We will respond within 30 days.
8. Children
AJParse is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
9. Changes to this policy
If we make material changes, we will update the date at the top of this page and notify users via email where required. Continued use of the service after changes constitutes acceptance.
10. Contact
Questions about this policy? Email us at support@ajparse.com.