Zero-Upload Privacy Policy

1. Bank statement PDFs never leave your browser

StatementTab is engineered as a 100% client-side browser application. When you select or drag-and-drop a bank or credit card PDF statement onto StatementTab, the file is read and parsed strictly inside your device's local RAM using standard Web File APIs.

Zero PDF files, transaction rows, payees, balances, or account numbers are ever uploaded, logged, cached, or transmitted to StatementTab servers or any third-party cloud OCR service. You can verify this directly in your browser's Developer Tools Network tab while converting any statement.

2. Local browser storage (localStorage)

If you activate a Pro License Key, your activation token and device instance ID are stored locally in your own browser's localStorage so you remain unlocked across visits. A pending checkout ID and random verification token are also stored locally during checkout so payment can be verified when you return. Statement rows stay exclusively in tab memory.

3. Billing & license key verification

Paid subscriptions ($9/month) are processed by our Merchant of Record payment partner, Dodo Payments. We never see or store your payment card numbers. When you activate or validate a license key, your browser sends only the license key and device activation ID over TLS to our verification endpoint (/api/license/*). These requests never include PDF content, balances, account digits, or filenames.

4. Contact

Questions regarding security, CPA firm compliance, or privacy may be sent directly to support@statementtab.com.