Privacy
Last updated: November 8, 2026
The short version
Your statements never leave your computer. The site sets no cookies, has no accounts and uses no third-party analytics. The only thing it records is a small set of usage counts (how many files were dropped, how many rows came out, whether the balances added up) with no identifiers attached, so the counts cannot be linked to you or to each other.
1. Who is responsible
AnyaIT, owner Keerthi Reddy Bommareddy, Ratingen, Germany (see the Impressum). Email: hello@pdfagents.ai.
2. Your statements
When you drop PDF statements on the page, your browser reads them with a program library served from this site. The text is extracted, the transactions are found, categorised and totalled, and the Excel, CSV and lender-summary files are all built in your browser. The files and their contents are not transmitted to us or to anyone else, and are not stored anywhere outside your browser. Closing or reloading the page discards them.
You can confirm this yourself: open your browser's network panel while using the tool. Apart from loading the page and its scripts, the only request leaving your browser is the small usage event described in section 4.
3. Hosting and server logs
The site is served by Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). To deliver the page, Google processes the technical data every web request carries: your IP address, date and time, the address requested and browser information. Google keeps these logs for a short period for security and operation. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in serving the site securely and reliably. Google may process this data in the United States under the EU–US Data Privacy Framework and standard contractual clauses.
4. Usage events
To learn whether the tool works and where it fails, the page sends a few events to a database we run on Google Cloud (Firestore, Google Ireland Limited, see above). Each event is one record with a fixed name, the page path, whether the screen was phone-sized, and the numbers below. No cookie, no session or device identifier, no IP address and no statement content is stored with it, so events cannot be linked to each other or to a person.
| Event | What it contains |
|---|---|
| page_view | which page was opened |
| files_dropped | number of files, number of pages, how many had no text layer |
| parse_done | number of rows and months found, how long it took, the bank the layout looked like, whether the balances added up |
| parse_failed | a reason code: encrypted, unreadable, scanned or no rows |
| view_lender | how many months of statements were available |
| export_started | the format (Excel, CSV or summary) and the row count rounded down to a bucket |
| rating | your answer to "Were these numbers right?" |
The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in improving a tool we offer free of charge. Because the records contain no personal data, there is nothing we could look up, correct or delete for a particular person. If you prefer that even these counts are not sent, a content blocker that stops requests to firestore.googleapis.com does so without affecting the tool.
5. Fonts
The page loads the Inter and Space Grotesk typefaces from Google Fonts (Google Ireland Limited). When your browser fetches them, Google receives your IP address and the address of the page. The legal basis is Art. 6(1)(f) GDPR. We plan to serve the fonts from this site instead; this section will be removed when that is done.
6. Email
If you write to us, we keep your email and our answer for as long as the conversation needs it and for the retention periods German commercial and tax law prescribe. The legal basis is Art. 6(1)(b) and (f) GDPR.
7. Your rights
Under the GDPR you may ask for access to, correction or deletion of personal data we hold about you, restriction of processing, data portability, and you may object to processing based on our legitimate interests. You may also complain to a data protection authority; the one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. Since the site stores no personal data beyond an email conversation you start, in practice these rights concern that correspondence. Write to the address in section 1.
8. California and other US visitors
We do not sell or share personal information, do not track visitors across websites, and do not use advertising cookies. The site collects none of the categories of personal information the CCPA covers from visitors who use the tool.
9. Children
The tool is meant for adults handling their own or their business's bank statements. We do not knowingly collect information from children.
10. Changes
When the site starts doing something this page does not describe, the page changes first and the date at the top moves.