Privacy Policy

Last Updated: May 13, 2026

Your bank statements contain some of the most sensitive data you own. We built Bank Extract so that data never leaves your computer. Not to us. Not to any cloud. Not to anyone.

Short Version: We Don't Want Your Data

Our business model is selling software, not data. Bank Extract processes your PDFs entirely on your machine. Your files, account numbers, transactions, and client names never reach our servers — because the app never sends them anywhere.

Bank Extract is intended for users aged 18 and older, or the age of legal majority in your jurisdiction, whichever is greater.

01

What We Collect (and Why)

We practice strict data minimization. We only collect what is absolutely necessary to deliver your license and keep it working. Nothing more.

We DO NOT Collect

·The content of your PDFs.
·Bank account numbers.
·Transaction details or financial records.
·Client names or any personal data from your documents.
·Keystrokes, screenshots, or usage patterns.
·Browsing history, telemetry, analytics, or behavioral data from the Software.
·Any data from users of the Free Trial, as it requires no purchase or license creation.

We ONLY Collect (For Paid Licenses Only)

· Your name and email address provided by Paddle at the time of purchase, used for license delivery, transaction verification, and support.
·Unique device identifier for seats, generated automatically from your hardware. It's anonymous and irreversible. We have no way to know what device it is or who owns it.
·IP address — logged during license verification to prevent abuse or exploit of our license system, we block suspicious activity as standard practice.

02

How the License Works

We create Bank Extract as an offline desktop app with a fully local Web Demo alternative too. Your files never leave your computer. Here's how the license system handles verification, simply and transparently.

Activation

You activate once

Enter your email and license key. A one-time ping verifies your purchase, binds the license to your device, and that's it. The app is yours.

Days 1 – 60

100% offline

No internet needed. Work for up to 60 days without bothering about connectivity. The license is verified locally using a cryptographic personal token stored on your machine. No network needed, no tracking.

Day 60

Automatic silent renewal

On day 60, the app silently checks for an internet connection. If available, your license is renewed automatically and the 60-day cycle resets. You'll see a small ✓ confirmation and that's it. Nothing to do.

If no internet

The app keeps working

The software keeps working normally. Starting at day 80, you'll see a reminder to connect to the internet so the license can renew before it enters a suspended state.

What happens on Day 90?

If the software hasn't been able to renew for 90 days, the license enters a suspended state. Your files or purchased license are not affected. Simply reconnect to the internet and re-enter your email and license key to reactivate. It takes a few seconds. Your lifetime license itself does not expire; only the active verification enters a temporary suspension that is immediately reversible.

During any verification, the only data sent to our servers:

Your Email License Key Device ID Your IP address

Security & Abuse Logs

IP addresses are retained for up to 30 days and automatically purged thereafter. This is standard security practice used solely to detect abuse, prevent fraud, and ensure the integrity of our license system. These logs are not used for tracking, profiling, or advertising.

03

Data Retention

Bank Extract licenses are lifetime. They do not expire by elapsed time. Here's exactly how long we hold your data and under what conditions it is deleted.

Active License

We retain your email address, name, license key, and Device ID for the lifetime of your active license. This data is required to validate your software access forever.

Suspended License

If your license enters a suspended state (for example, after 90 consecutive days without verification — see "How the License Works" above for the full 60/80/90-day cycle), your data is untouched. We don't modify or delete anything. We may reach out to your registered email to confirm everything is okay. Your access resumes the moment you reconnect and reactivate.

Revoked License

If your license is terminated due to: (a) a refund for a verified technical failure, (b) a confirmed violation of our Terms of Service, (c) detected fraudulent activity, (d) a valid legal order requiring revocation, or (e) a chargeback or payment dispute initiated in bad faith, all associated License Data (including any retained IP logs) will be permanently deleted from our database within 30 days.

04

Third-Party Services We Use

We work with the following trusted services to operate Bank Extract. Each receives only the data strictly necessary to perform its function.

Paddle.com

Merchant of Record — payments, tax, VAT

Paddle.com is a globally trusted Merchant of Record, operating since 2012. Paddle processes your payment and provides us with your name and email address for transaction management, including refund handling, purchase verification, and customer support. We never see or store your credit card or payment information. Paddle handles all payment processing, tax compliance, and invoicing.

Resend

Transactional email delivery

Receives your email address and license key to deliver your purchase confirmation. Triggered automatically by Paddle's encrypted webhook. Resend acts as a data processor under our instructions and does not use your data for any other purpose.

License delivery guarantee: If the automated email fails for any reason, we will manually send your license key within 2 business days. If you do not receive your license within 3 business days of purchase, contact us at support@bank-extract.com and we will resolve it immediately — including a complimentary additional seat for the inconvenience.

Google Analytics

Website analytics

Receives anonymous usage data and IP address to help us understand how visitors navigate our website. Only loaded with your consent via our cookie banner. Google Analytics has no access to the desktop application or your local files.

05

Secure Payments

We use Paddle.com as our authorized Merchant of Record to handle all payments. We do not store, process, or have access to your credit card information. Paddle handles VAT, tax compliance, and payment security globally. Your payment data cannot leak from our side because we never touch it.

06

No External AI / Cloud APIs

Many tools send your files to OpenAI, Google Cloud, or other third-party APIs to process them. We don't. We use local, coordinate-based algorithms (TextBounds) that run strictly on your CPU. Your documents stay within your local environment at all times, even when offline.

07

You Are in Control

Whether you are in Europe (GDPR), California (CCPA), or anywhere else, we believe you own your data. Here are your rights:

Right to Access

You can request a copy of all License Data we hold about you (your email address, license key and Device ID) at any time.

Right to Deletion

Email us and we will permanently delete your License Data within 30 days of your verified request. Note: this will deactivate your license, as the Device ID is required for verification.

Right to Object

You can opt out of Google Analytics at any time by declining cookies or using browser-level tracking protection.

To exercise any of these rights, email us at privacy@bank-extract.com (for privacy-related requests) or support@bank-extract.com (for general account deletion). Both addresses route to the same team and are processed within 30 days. We aim to respond within 5 business days.

Please note: any dispute arising from this Privacy Policy or our data practices shall be resolved in accordance with the binding arbitration and class action waiver provisions set forth in our Terms of Service §14.

08

Data Responsibility

Because Bank Extract operates locally, the security of your documents depends on the security of your own computer.

Your Device: Please keep your computer free of malware. If your device is compromised, any file on it (including your PDFs) could be at risk — that is outside our control.

Accuracy: While our algorithms are precise, you (the professional) are responsible for reviewing and verifying the accuracy of all extracted data before using it for any tax filing, financial reporting, accounting, or business decision.

09

Cookies & Analytics

Our website (bank-extract.com) uses cookies solely for performance and analytics via Google Analytics. These cookies help us understand how visitors navigate our site.

Important: These cookies apply to the website only. The desktop application does not transmit analytics, telemetry, or usage data, and does not contain any tracking mechanisms. The Web Demo also does not use cookies or transmit document data. Google Analytics has zero access to your local files, PDFs, or bank data.

You can disable cookies at any time through our cookie banner or your browser settings. If you decline cookies, no analytics data is collected.

10

Policy Updates

We may update this Privacy Policy from time to time. When material changes are made, we will update the "Last Updated" date at the top of this page and notify you by email. Continued use of Bank Extract after changes take effect constitutes your acceptance of the revised policy. If you disagree with any changes, you must stop using the Software and may request deletion of your data within 30 days of the notification.

11

Entire Agreement, Dispute Resolution & Governing Language

This Privacy Policy, together with our Terms of Service and EULA, constitutes the complete legal agreement between you and Bank Extract regarding data practices. Any dispute arising under these documents shall be resolved in accordance with the binding arbitration, individual proceeding, and class action waiver provisions detailed in our Terms of Service 14. If any provision of this Policy is held invalid or unenforceable, it shall be modified to the minimum extent necessary to remain valid, or severed only if modification is not possible; the remaining provisions will continue in full force and effect. These documents are originally drafted in English. In the event of any conflict between this English version and a translation, the English version shall prevail.