Privacy Policy
Effective Date: November 7, 2026 • Version 2.0 (Zero-Cloud Storage Invariant)
§1 The Zero-Cloud Financial Privacy Guarantee
StatementDiff was engineered on a strict architectural principle: your bank statements, transactions, and account details never touch our servers.
- 100% Client-Side Execution: All PDF coordinate extraction, optical text parsing, and CSV reconciliation occur exclusively inside your web browser’s JavaScript memory (
pdfjs-dist). - Zero Storage: We do not store, cache, transmit, or log your bank PDFs, account numbers, balances, merchant names, or Monarch Money CSV exports.
- Ephemeral RAM: When you reload or close your browser tab, all statement and transaction data is immediately purged from memory.
§2 Information We Collect & Why
We collect only the minimum account information required to authenticate you and manage your subscription entitlements:
When you sign in using Google or GitHub 1-click OAuth, we receive your verified email address, full name, and authentication user ID. We never see or store your Google or GitHub passwords.
In PostgreSQL (`user_entitlements`), we record your active tier (`free`, `pack_12`, or `pro_annual`), remaining statement credits, and daily rate limit counters.
All checkout operations are handled by Dodo Payments Inc. acting as Merchant of Record. Dodo securely handles your payment details. StatementDiff only receives confirmation of payment status, product ID, and customer identifier. We never collect or store credit card numbers or CVVs.
§3 Optional AI Self-Heal & PII Scrubbing
If an encrypted or scanned statement cannot be parsed via local PDF coordinate rules, you may optionally choose to invoke AI Self-Heal fallback:
1. Client-Side Redaction: Before any transmission, client regex strips 13-16 digit card numbers, account numbers, and SIN/SSN patterns.
2. Server-Side Secondary Scrub: Our API route applies secondary sanitization (scrubServerSidePII) before contacting OpenAI.
3. Zero Model Training: API requests utilize OpenAI Structured Outputs with enterprise zero-data-retention agreements; your data is never used to train artificial intelligence models.
§4 Cookies & Browser Storage
We use browser storage strictly for essential functional operations:
sessionStorage: Temporarily retains uploaded PDF/CSV file buffers during OAuth redirection so you don't have to re-select files upon signing in.Supabase Cookies: Secure, HttpOnly tokens used strictly to maintain your authenticated login session.
§5 Global Privacy Rights (GDPR, CCPA, PIPEDA)
Regardless of your jurisdiction—whether in Canada (PIPEDA), the United States (CCPA), or the European Union/UK (GDPR)—you have the following rights:
- Right to Deletion: You may request complete erasure of your account email and entitlements from our database at any time.
- Right to Portability: Export your account records and reconciliation CSVs without restriction.
- Zero Sale of Personal Data: We never sell, rent, monetize, or disclose personal information to advertising networks or third-party brokers.
Questions or Data Requests
For any privacy inquiries, data deletion requests, or security audit questions, please email [email protected] or open an issue on our GitHub repository.