Privacy Policy

1. Introduction

StatementBear ("we", "us", "our") operates the website statementbear.com. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

Account information: When you create an account, we collect your email address. We use passwordless authentication via magic links.

Bank statements: When you upload a bank statement PDF, we extract transaction data (dates, descriptions, amounts) for analysis. We do not collect or store bank login credentials.

Usage data: We collect basic usage information such as pages visited and features used to improve the service.

Payment information: Payments are processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing.

3. How We Use Your Information

We use your information to: - Provide and improve the StatementBear service - Analyze your bank statements and generate spending insights - Send magic link emails for authentication - Process subscription payments - Generate anonymous, aggregated benchmark data

4. Data Storage and Security

Your uploaded PDFs are stored in Cloudflare R2 with encryption at rest. Transaction data is stored in our database with encryption. We use HTTPS for all data in transit. We retain your data for as long as your account is active. You can delete your data at any time from your account settings.

5. Data Sharing

We do not sell your personal data. We share data only with: - OpenAI and Anthropic: Transaction text is sent to whichever of these providers is currently powering our analysis. Neither uses API inputs submitted through their business APIs to train models. - Stripe: For payment processing. - Cloudflare: For PDF storage. - Google Analytics and PostHog: For usage analytics. They receive your email address and what you did in the app, never your transactions or statements.

6. Anonymous Benchmarks

We may use your spending data in anonymous, aggregated form to generate benchmark comparisons. This data cannot be traced back to you or your transactions.

7. Cookies and Analytics

We use a session cookie to keep you logged in. We also use Google Analytics and PostHog to understand how the site is used: which pages people visit, which features they use, and where things go wrong. These set their own cookies and receive your account email address so we can tell one person's visits apart from another's. Your transactions, statements and uploaded PDFs are never sent to either of them. We do not record your screen.

8. Your Rights

You can: - Access your data through your account dashboard - Delete your data and account from your settings page - Contact us to request a copy of your data

9. Demo Users

If you use StatementBear without an account, your demo analysis is stored temporarily and automatically deleted after 24 hours.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email.

11. Contact

If you have questions about this policy, contact us at [email protected].