Privacy

Last updated: October 11, 2026

StatementSure is run by BulkLift Platform Inc., Windsor, Ontario, Canada. This page explains what personal information we collect, why, who handles it for us, and what you can ask us to do with it. We follow Canada's federal privacy law (PIPEDA) and, for people in Quebec, Quebec's private-sector privacy law.

Your statements stay on your device

StatementSure reads your PDF inside your web browser. The file and what's in it (transactions, names, account numbers) are never uploaded to us, and we can't see them. When you close the tab, they're gone.

What we collect, and why

• A fingerprint and page count for each file you download, so we can count your free pages and credits and never charge you twice for the same file. The fingerprint is a short code worked out from the file; it can't be turned back into the file.
• Your account, if you create one or buy credits: your email address, credit balance and purchases, so you can use what you bought.
• Payments: Stripe handles card payments. We get your email, the amount and whether the payment went through. We never see your card number.
• Messages: if you join a waitlist or ask for help, your email address and what you write, so we can answer.
• Anonymous usage counts, such as "a 3-page statement was converted and balanced", to see how the product is used and improve it. They don't include your email or anything from your statement.
• Standard logs kept by our hosting and sign-in providers, such as IP address, browser type and sign-in times, for security and to fix errors.

We don't sell personal information, and we don't use it for advertising.

Statements you send us for help

If a statement doesn't convert and you choose to email it to us so we can fix the converter for your bank, we use it only for that and delete every copy within 30 days of solving the problem. We may make a made-up test file with the same layout; it never contains your names, numbers or transactions.

Cookies and browser storage

We don't use advertising or tracking cookies. Your browser keeps track of your free pages (page counts and file fingerprints), remembers a short source tag if you arrived through one of our own links (for example "mcp" from our AI-assistant plug-in) so we can count which of them lead to purchases, and, if you sign in, keeps you signed in. You can clear this anytime in your browser settings. We count visits without cookies and without identifying you.

Companies that help us

These companies handle data for us, only to run the service, under their own security and privacy commitments:

• Vercel (website hosting and visit counts)
• Supabase (database and sign-in)
• Stripe (payments and receipts)
• Resend (sign-in emails, and product emails to people who asked for them)
• Cloudflare (domain and email delivery)
• Google (our support inbox, including statements you email us)

Some of them store data outside Canada, mostly in the United States, where authorities there may be able to access it under their laws.

How long we keep it

• Your account, credits and file fingerprints: until you ask us to delete your account.
• Purchase records (ours and Stripe's): six years, as Canadian tax law requires, even after your account is deleted.
• Waitlist addresses: until you unsubscribe or ask us to delete them.
• Help requests: until you ask us to delete them, and no longer than we need them.
• Anonymous usage counts: kept for statistics; they can't be linked back to you.
• Deleted information can stay in our backups for up to 90 days before it's gone.

Emails

We email you sign-in links and receipts when you use the service. We send news or offers only if you asked for them, for example by joining a waitlist. Each of those emails has an unsubscribe link, and we stop when you use it.

Your rights

You can ask to see the personal information we have about you, correct it, withdraw your consent, or have your account and data deleted. Email support@statementsure.com and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

Security

Data is encrypted on its way to and from the site, each provider only gets what it needs, and statements are never stored on our servers. If a data breach could seriously harm you, we'll tell you and the authorities, as the law requires.

Who is responsible

BulkLift Platform Inc.'s Privacy Officer is responsible for personal information. You can reach them at support@statementsure.com.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use information you already gave us, we'll email you before it takes effect.

StatementSure is for adults and businesses, not children.