Privacy Policy
Last updated: July 22, 2026
Draft. This document accurately describes how the product works, but it must be reviewed by counsel and adapted to Mexico's data-protection law (LFPDPPP) before it is published.
[RAZÓN SOCIAL] ("StatementFlow", "we") operates the StatementFlow web app. This policy explains what data we process and, above all, what data we never receive. The product's core principle is that your bank statement never leaves your browser.
1. Your statement is never uploaded
PDF extraction, bank detection, transaction parsing, and CSV/Excel generation run entirely inside your browser.
We do not receive, transmit, log, or store the PDF file, the extracted text, or any transaction row. When you close the tab, that data is gone from your device's memory.
2. Data we do process
Account: when you sign up through Clerk we process your email address and, if you choose Google, that account's identifier. Authentication is handled by Clerk, Inc.
Usage: to enforce free-plan limits we store only your user ID, the (UTC) month, and how many statements you converted. Never statement content.
Subscription: to manage your plan we store Stripe identifiers, the plan, status, and renewal dates. Payments are processed by Stripe; we neither see nor store full card details.
3. Third parties we use
Clerk (authentication), Stripe (payments), and Cloudflare (hosting and the D1 database). Each processes data under its own privacy policy.
We use no analytics, ad-tracking, or error-reporting tools that could serialize statement content.
4. Retention
Usage counts and subscription metadata are retained while your account is active and for any period required by applicable tax and accounting obligations.
We retain no statements or transactions because we never receive them.
5. Your rights
You may request access to, correction, deletion of, or objection to the processing of your personal data, and may withdraw consent, by writing to hola@bancoaexcel.com.
6. Cookies
We use only the cookies necessary to keep you signed in (managed by Clerk). We use no advertising or cross-site tracking cookies.
7. Contact
Data controller: [RAZÓN SOCIAL]. Address: [Ciudad, Estado], México. Questions about this policy: hola@bancoaexcel.com.