Privacy policy

The service is operated by Samro Studios Inc., in Laval, Quebec.

The person in charge of the protection of personal information is Sami Bdeira. You can reach them at confidentialite@samrostudios.com.

• The PDF file you drop, for the time it takes to convert it.
• At payment, Stripe collects your email and payment details. From Stripe we receive your email, the amount, the payment reference and, to calculate taxes, your province.
• Limited technical logs: the name of a step, the file size, the page count, a status, how the statement was read, the processing time, a Stripe reference (payment, session, refund or event) and an error code. They contain no transaction, no name and no amount from your statement.
• If you give feedback after a paid download: your rating and, if you wish, a comment, a first name and a city.

The site uses no advertising cookies and no tracking tools. It sets a single technical cookie, an anonymous id kept for one year in your browser, used only to limit abuse.

• The PDF is read in memory by our own code. It is never written to a disk or to any storage.
• As soon as the result is sent back to you, the server keeps neither the PDF nor the extracted data. Nothing is kept after the conversion.
• The full result is handed to you encrypted (AES-256-GCM). Only our server holds the key, and the result expires after 1 hour.
• Only the first lines of the preview are sent to your browser in the clear. The greyed out lines in the preview are shapes, not your data.
• The encrypted result and the preview lines are kept in your browser tab (session storage), on your device. They disappear when you close the tab, and the result can no longer be opened after 1 hour.
• After payment, our server decrypts the result, builds the Excel or CSV file and sends it to you. It keeps no copy.

In this version, extraction is done only by our code. No bank data is sent to any artificial intelligence service, and your data is never used to train a model.

If this ever changes, we will first complete a privacy impact assessment, then update this policy before any change.

The site is hosted by Vercel Inc., a United States company, so your statement may be processed outside Quebec and Canada for the length of the conversion. Nothing is kept there.

Payments are handled by Stripe, which may process payment data outside Quebec and Canada, including in the United States. Stripe never receives the content of your statement. We send Stripe only a fingerprint of the result, which cannot be used to recover its content, a marker showing the payment comes from our service, and the page language.

The counters that limit abuse, Stripe payment references and feedback are kept in a database hosted by Neon in the United States (Virginia). That database never receives the content of your statement, your file name or your email.

We do not sell, rent or trade any information. The content of your statement is shared with no one, not even Stripe. We share information only with the processors named above (Vercel, which hosts the site, Stripe, which handles payments, and Neon, which hosts our database), to run the service, or when the law requires it.

After a paid download, we ask you once how it went. Answering is optional, and your answer changes nothing about your right to a refund.

• What we keep: your rating, your comment if you wrote one, your first name (or initials) and your city if you gave them, your answer when we ask whether we may show your review, with the date and time of that answer, the language of the page and the currency paid.
• Your feedback is linked to your payment only by a one way, salted fingerprint of its reference, so that there is only one review per payment. We never keep your email, your file or your connection address with your feedback.
• Your comment, first name and city are shown only if you ticked the box, and only after we have read them. They appear in the Reviews section of this site's home page.
• Your rating counts in the average shown, whether your review is published or not.

To remove your review, write to confidentialite@samrostudios.com. We erase your comment, first name and city, and it is no longer shown. Your rating stays in the average, with nothing that identifies you.

• PDF statement: not kept. It exists only in memory during conversion.
• Encrypted result: in your browser, 1 hour at most.
• Payment records (email, amount, reference): kept as long as tax law requires, then destroyed.
• Technical logs: 30 days at most.
• Stripe payment references kept so that the same payment is never refunded or handled twice: 400 days at most, then deleted automatically.
• Feedback: for as long as the service exists, or until you ask us to remove yours.

To limit abuse of free previews, payment, paid downloads, refund requests and our feedback form, we keep a one way, salted fingerprint of your connection address and a counter, never the address itself. It expires at the end of the limit window (one day at most) and is then deleted automatically. This, and Stripe payment references, are kept in a database hosted by Neon in the United States (Virginia).

When you ask for a one click refund, we keep a one way, salted fingerprint of the card fingerprint Stripe gives us for that payment (or, for a payment made without a card, of your connection address), never the card number. It is used only to limit one click refunds to two per card per calendar year, and it is deleted automatically after 400 days at most. It is kept in the same database.

You can ask to access, correct or delete the information we hold about you, and withdraw your consent. Write to confidentialite@samrostudios.com. We answer within 30 days.

You can also file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). Outside Quebec, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

We keep a register of privacy incidents. If an incident carries a risk of serious harm, we notify the Commission d'accès à l'information and the people affected.

If this policy changes, the new version is posted on this page with its update date.