Privacy Policy for Bank Statement Converter with AI

Introduction

Welcome to Bank Statement Converter with AI ("we," "us," or "our"), a product of Guse Ltda. We are committed to protecting your privacy and financial data. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and its related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect different types of information to provide and improve our Service to you.

A. Information You Provide Directly

• Account Information: When you create an account, we collect information such as your name, email address, and a hashed password.
• Financial Documents: To use our bank statement conversion service, you upload PDF bank statements. This is highly sensitive financial data that includes:
  • Account numbers and bank information
  • Transaction history and amounts
  • Balance information
  • Merchant and payee details
  • Dates and transaction descriptions
• Payment Information: If you subscribe to a paid plan, our third-party payment processor (Stripe) will collect your payment card information. We do not store your full credit card details on our servers.
• Communications: If you contact us for support or other inquiries, we will collect the information you provide in your communications.

B. Information We Collect Automatically

• Usage Data: We automatically collect information about how you interact with our Service. This may include your IP address, browser type, device information, operating system, pages viewed, the time and date of your visit, and the time spent on those pages.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track activity on our Service and hold certain information.

2. How We Use Your Information

• To Provide and Maintain the Service: To create, manage, and secure your account, and to enable you to convert bank statements to Excel, CSV, JSON, or QBO format.
• To Process Bank Statements: Your bank statement documents are processed by our OCR and AI models to extract transaction data and convert it to structured formats (Excel, CSV, JSON, QBO).
• To Process Transactions: To process payments for our subscription services.
• To Communicate with You: To send you service-related announcements, updates, security alerts, and provide customer support.
• For Security and Fraud Prevention: To detect and prevent fraudulent activities and protect our users.
• For Analytics and Improvement: To analyze usage patterns and trends to improve our Service and enhance user experience.

3. How We Share Your Information

We do not sell your personal or financial data. We only share your information in the following limited circumstances:

• OCR and AI Processing: To provide the core functionality of our Service, we send bank statement documents to carefully selected third-party OCR and AI service providers through secure APIs for document processing and data extraction. We do not allow providers to use your data to train their models.
• Service Providers: We may share your information with third-party vendors and service providers who perform services on our behalf, such as secure cloud storage, payment processing, analytics, and customer support. These providers only have access to the information necessary to perform their functions and are contractually obligated to protect your data.
• Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

4. Data Security

We implement enterprise-grade security measures to protect your financial data. This includes encryption in transit and at rest, secure file storage with automatic deletion, and restricted access to authorized personnel only.

Please note that while we strive to use commercially acceptable means to protect your Personal Information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your account information while your account is active. Uploaded documents and converted outputs are automatically deleted based on your plan:

• Demo: 24 hours
• Free: 3 days
• Starter: 180 days (6 months)
• Professional: 365 days (1 year)
• Business: 730 days (2 years)
• Scale & Enterprise: Unlimited retention (no automatic deletion)

To minimize storage of sensitive data, original uploads may be deleted sooner after processing where feasible. You can delete individual conversions or your entire account at any time. After deletion, residual copies in automated backups may persist for up to 7 days before being irreversibly purged.

We are not a long-term storage provider. Please download and securely store your converted files within your retention window.

6. Your Rights and Choices

You have certain rights regarding the personal information we hold about you.

• Access and Correction: You can access, review, and update your account information at any time by logging into your account.
• Deletion: You can delete your account and all associated data directly from your account settings. When you delete your account, your data is permanently removed from our production systems.
• Object to Processing: You have the right to object to our processing of your personal data, such as for marketing purposes. You can opt-out of marketing communications by using the "unsubscribe" link in our emails.
• Data Portability: You can download your converted files at any time during the retention period.
• Cookies: You can manage your cookie preferences through your browser settings.

7. LGPD Compliance (Brazil)

As a company registered in Brazil, we comply with the Lei Geral de Proteção de Dados (LGPD - Law No. 13,709/2018). Under the LGPD, you have the following rights:

• Confirmation and Access: You can request confirmation of data processing and access to your personal data.
• Correction: You can request correction of incomplete, inaccurate, or outdated data.
• Anonymization, Blocking, or Deletion: You can request anonymization, blocking, or deletion of unnecessary or excessive data.
• Portability: You can request the portability of your data to another service provider.
• Deletion: You can request deletion of personal data processed with your consent.
• Information: You can request information about public and private entities with which we have shared your data.
• Revocation of Consent: You can revoke your consent at any time.

Legal Basis for Processing: We process your personal data based on: (i) your consent; (ii) the necessity to perform a contract with you; (iii) compliance with legal obligations; and (iv) our legitimate interests, provided they do not override your fundamental rights and freedoms.

8. Children's Privacy

Our Service is not intended for use by anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers are made in accordance with applicable data protection laws (including LGPD and GDPR where applicable) and that appropriate safeguards are in place to protect your personal information.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We may also notify you via email or through a prominent notice on our Service.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: