Skip to content
BANKLIFT

Security & privacy

Last updated: 2026-07-09

BankLift converts bank statements. We treat every file as confidential data. In short: your file is sent to an AI provider that never trains on it, and we keep a copy for 30 days to improve accuracy on your bank's layout, after which it is deleted automatically.

How your file is handled

When you upload a statement, your browser extracts the PDF text layer or downscales a scan image, then sends that content over a single secure request (HTTPS/TLS) to our extraction service.

Our service passes the content to the AI provider, which returns the transactions. We keep the uploaded file and the extracted transactions for 30 days so we can improve accuracy on your bank's layout; after that they are deleted automatically.

What we never do

  • We do not use your files to train AI models — neither we nor the AI providers we use.
  • We do not sell or share your data with third parties for marketing.
  • We do not keep your file for longer than 30 days.

Where it runs

The app and processing run in an EU region where available. Conversion happens in your browser and through the extraction service; there is nothing to install.

Your rights

Data processing follows the GDPR and the Republic of Moldova Law no. 195/2024. We hold the uploaded file and the extracted transactions for 30 days; within that window you can ask us for access to them, or for their immediate erasure.

For questions about access, rectification or erasure of your data, contact us below.

Sub-processors

To provide the service we use the providers below. AI providers are used under contractual terms that forbid training on your data.

  • Google (Gemini API)AI extraction of statement text/image (primary) — no training
  • OpenAIFallback AI extraction — no training
  • Anthropic (Claude API)Fallback AI extraction — no training
  • Google (Firebase Storage & Firestore)Retention of the uploaded file and extracted transactions for 30 days — for accuracy improvement
  • StripePayment processing (email, billing identity — never statement content)
  • VercelApplication hosting (EU region)
  • Upstash / CloudflareTransient counters (spend limit, credits) — no statement content

Contact

For any privacy or security question, email us at support@bank-lift.com.