Back to Home

Privacy Policy

Last updated: March 31, 2026

1. Introduction

CSV Bank Converter, a product of BillerBear (“we,” “our,” or “us”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our bank statement PDF to CSV conversion service (“the Service”).

2. Information We Collect

2.1 Uploaded Files

When you upload a bank statement PDF, we temporarily process this file to extract transaction data. The file and extracted data are:

  • Processed on secure servers using encrypted connections
  • Never stored permanently — all files are automatically deleted within 24 hours
  • Never shared with third parties
  • Never used for training AI models or analytics

2.2 Payment Information

We use Paddle as our payment processor and Merchant of Record. When you make a purchase:

  • Payment details are handled entirely by Paddle — we never see or store your credit card information
  • Paddle may store your email address for transaction receipts and customer support
  • Paddle processes payments in compliance with PCI DSS standards

2.3 Automatically Collected Information

Like most websites, we may automatically collect:

  • IP address (for security and abuse prevention)
  • Browser type and version
  • Device information and operating system
  • Pages visited and time spent
  • Referring website

3. How We Use Your Information

We use the information we collect to:

  • Provide the PDF to CSV conversion service
  • Process payments and send receipts
  • Improve our service and user experience
  • Prevent fraud and abuse
  • Respond to support requests
  • Send administrative information and service updates
  • Monitor and analyze usage trends
  • Comply with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • All data is transmitted over HTTPS/TLS encryption
  • Files are processed in isolated environments
  • Automatic deletion of all uploaded files within 24 hours
  • Regular security audits and monitoring
  • Limited access to personal information

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services that may collect information:

  • Paddle: Payment processing and Merchant of Record (see Paddle's privacy policy)
  • Vercel: Website hosting
  • Railway/Render: Backend hosting

Each third-party service has its own privacy policy governing the handling of your data. We recommend reviewing them.

6. Cookies

We use minimal cookies necessary for the service to function:

  • Essential cookies: To maintain your conversion session and ensure the Service works properly
  • Analytics cookies (optional): To understand usage patterns and improve the Service

You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate information
  • Right to Erasure: Request deletion of your data (note: uploaded files are automatically deleted within 24 hours)
  • Right to Restriction: Limit how we use your data
  • Right to Data Portability: Export your data in a portable format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: At any time, where processing is based on consent

To exercise these rights, please contact us at privacy@csvbankconverter.com.

8. Data Retention

We retain your information only for as long as necessary:

  • Uploaded files: Automatically deleted within 24 hours
  • Transaction records: Retained as required by law for accounting and tax purposes
  • Usage logs: Retained for up to 90 days for security and troubleshooting
  • Support communications: Retained for as long as necessary to resolve your inquiry

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising your rights

We do not sell your personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: