Privacy

Last updated 6 October 2026.

The short version

Your statements are read on our own server, in memory, and never stored. We keep only what an account needs to work and to be billed.

What we never store

• Your documents, or anything read from them: transactions, balances, names, account numbers. A document lives in memory while it is read and is gone once its results are with you; closing the page forgets the rest.
• Passwords: there are none. You sign in with a passkey; we keep only its public key.
• Card details: payment is taken by Dodo Payments; your card never reaches our server.
• IP addresses. Without an account, today's page count is kept in memory under a one-way code of your address that changes every day.

What we store, if you create an account

• An account id, your plan, its status and renewal date.
• Your passkeys' public keys, with when each was added and last used.
• How many pages you have read in each day or month: numbers only.
• Your sessions, as a one-way hash of each session id, until they expire.
• Your Dodo Payments customer and subscription ids, and the email you gave at checkout, used for billing and receipts only.
• On Business, your API keys, as a one-way hash and a short prefix.

Cookies

Signed in, one strictly necessary cookie holds your session (HttpOnly, Secure, SameSite=Lax). It is not used for anything else, so there is no cookie banner. Without an account there are no cookies at all.

Analytics

Visits are counted by Umami on our own server, cookie-free and with Do Not Track respected. Only page views and a few named events are counted (such as "a statement was read"); never a file name, an amount or anything from a document.

Who processes data for us

• Dodo Payments, merchant of record: checkout, subscriptions, taxes, receipts, and your billing email.
• Our server host, where the app, the reader and the accounts database run. No outside AI service ever sees your documents.

Your rights

You can delete your account at any time from your account page: your account, passkeys, page counts and ids are deleted, and any subscription is cancelled first. Billing records Dodo Payments must keep by law stay with them. To ask what we hold, or to have it corrected or deleted, write to privacy@docsanalyzer.com.

Contact

Questions and problems: support@docsanalyzer.com. Please don’t attach statements or other documents: describe what happened, or send a screenshot with the figures covered. A statement sent by email sits in an inbox, which is exactly what the app avoids.