The short version
- Your bank statements are converted inside your browser. They are never uploaded to our servers and never stored by us.
- We keep only what an account needs: your email, your plan, your credit balance, and usage counts (page numbers — never page contents).
- You can verify this yourself: load the page, disconnect from the internet, and the converter still works.
1. Who we are
BayanSheet (“we”, “us”) provides a tool that converts bank statement PDFs into Excel and CSV files, built first for accountants in the UAE and the wider Arab world. You can reach us at support@bayansheet.com.
2. Your statements never reach us
When you convert a statement, the file is read and processed by code running in your own browser, on your own device. The PDF is not sent over the internet to BayanSheet. The extracted transactions exist only in your browser’s temporary memory, and the Excel/CSV output is generated in the browser and saved directly to your device. When you close or refresh the tab, nothing remains.
Because the file never reaches us, we cannot store it, leak it, log it, or be forced to hand it over.
Don’t take our word for it. Let the page load, then disconnect from the internet — the conversion still works, which would be impossible if your file were being uploaded. You can also open your browser’s developer tools (F12 → Network tab) and watch: no request carries your file anywhere.
3. What we do store
If you create an account, we store the minimum needed to run it and bill for it:
- Account: your email address, an optional display name, and a password stored only as an irreversible hash.
- Plan and billing state: your subscription tier and status, billing interval, and identifiers that link your account to our payment provider.
- Usage numbers: your page allowance, pages used this period, and your never-expiring credit balance — counts only.
- Conversion metadata: when a conversion ran, which bank template was used, how many pages, whether it succeeded, and the output format (xlsx/csv). Never the contents.
- Support messages you choose to send us.
4. What we never store
- The bank statement PDF itself, or any part of it.
- Any transaction data — amounts, dates, descriptions, balances.
- Account numbers, IBANs, or card numbers from statements.
- Names, addresses, or any personal data found inside a statement.
- The Excel/CSV output file.
- The file names of your statements (these can contain client names).
5. Service providers we use
A small number of companies process limited data on our behalf:
- Supabase — our authentication and database provider. It stores the account and usage records described in section 3, including your login email and hashed password.
- Paddle — our payment provider and merchant of record. When you pay, your card details go directly to Paddle and never touch our servers. Paddle appears as the seller on your card statement and invoice, and calculates and remits VAT/sales tax.
None of these providers ever receives your statement files or their contents — the files never leave your browser. If this list changes, we will update this page. You can request the current list at any time via support@bayansheet.com.
6. Cookies and local storage
We use only what the service needs to function:
- Session: if you log in, your browser holds a session token so you stay signed in.
- Free-page counter: if you try the tool without an account, your browser’s local storage keeps a small counter of the free pages you have used. It stays on your device.
No statement data is ever written to cookies, local storage, or any other browser storage. We do not use advertising cookies or cross-site trackers. If we ever add analytics, we will say so here first.
7. A possible future feature: assisted OCR (not active)
Some scanned or unusual statements are hard to read in the browser alone. We may one day offer an optional, consent-based mode that sends a difficult page to a server for OCR help. To be clear: this mode does not exist today — no statement data leaves your browser in any current path. If we ever build it, it will be strictly opt-in (off by default), we will name the provider, require a zero-data-retention arrangement, and update this policy before it goes live.
8. Your rights
We honour data-protection rights under the UAE Personal Data Protection Law (PDPL) and, for users in the EU/UK, the GDPR: you may access, correct, export, or delete your data. Because we store so little, an export is small — your account details, billing state, and conversion metadata.
Deleting your account removes your account, subscription, credit, and conversion-metadata records, including your record with our authentication provider. Invoices may be retained in anonymised form where tax and accounting law requires it. Request deletion from your account settings or by emailing support@bayansheet.com.
9. How long we keep data
Account, billing, and credit data is kept while your account is active, and for a limited period afterwards where legal or accounting rules require it. Conversion metadata is kept so you can see your own history and can be purged on request. Statement contents are never held, so there is nothing of them to retain.
10. Legal bases
We process account and billing data to perform our contract with you (providing the service you signed up for), and limited operational data under our legitimate interest in keeping the service secure and preventing abuse. Anything optional will be based on your consent.
11. Changes to this policy
If we change how the product handles data, we will update this page and the “last updated” date, and for significant changes we will notify account holders by email.
12. Contact
Questions, requests, or concerns: support@bayansheet.com. See also our Terms.