Privacy policy

Who is responsible for your data

The service at bankreconciler.com is operated by the company shown in the company details image on this page, which is the controller of personal data described in this policy. For files you upload on behalf of your business or your clients, we act as a processor on your instructions, as described in our data processing agreement. You can reach us at support@bankreconciler.com.

What data we process

• Account data. Your email address, a hashed password, sign in codes, the plan you choose and the company details you enter for invoices.
• Uploaded files. Bank and card statements, ledger exports and invoice lists, and the reconciliation results produced from them. These may contain names of payees and customers, account numbers and amounts.
• Usage data. Pages visited, the source that brought you to the site, actions in the app, IP address, browser type and time of access.
• Communication. Messages you send to our support address and our replies.
• Payment data. Billing details and payment status. Card numbers are handled by our payment operator and never reach our servers.

Why we process it

• To provide the service, run reconciliations and keep your account, on the basis of our contract with you.
• To send sign in codes, account emails and service notices, on the basis of our contract.
• To bill subscriptions and keep accounting records, on the basis of legal obligations.
• To protect the service against abuse, fraud and attacks, on the basis of our legitimate interest.
• To understand how the site is used and improve it, on the basis of our legitimate interest, using aggregated data.
• To send product news, only with your consent, which you can withdraw at any time with the unsubscribe link.

Who receives your data

We share data only with service providers that help us run BankReconciler, under contracts that bind them to confidentiality and security. Categories of recipients are a hosting provider for servers and encrypted storage, an email delivery provider, a payment operator, and, for scanned PDF statements on paid plans, a text recognition provider. We do not sell personal data and do not share uploaded files for advertising or model training.

International transfers

Some providers may process data outside your country. Where this happens, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep data

• Files and results from reconciliations run without an account are deleted 24 hours after upload.
• Account files are kept for the retention of your plan or the period you configure, and you can delete them earlier at any time.
• Account data is kept while your account is open and deleted within 30 days after you close it, except data we must keep by law.
• Billing records are kept for the period required by tax and accounting law.

How we protect data

Connections are encrypted with TLS, files and results are encrypted at rest, access is limited to people who need it, and actions in the app are logged. More on the security page.

Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format and withdraw consent at any time. California residents have the right to know, delete and correct personal information and to opt out of its sale or sharing, and we do not sell or share it. To use any of these rights, email support@bankreconciler.com. You may also lodge a complaint with your local data protection authority.

Cookies

We use cookies that are needed for the site to work: a session cookie that keeps you signed in, a security token for forms and a cookie that remembers your consent choices. We do not use advertising cookies.

Children

BankReconciler is a business service and is not directed at children under 16. We do not knowingly collect their data.

Changes to this policy

We may update this policy. The date at the top shows the latest version, and we notify account holders by email about material changes.