StatementSync (easystatement) privacy

Applies to the StatementSync web app (repository name easystatement): a web app hosted on Vercel that turns bank and card statement files you upload into a list of transactions in your account: one statement is read free, once per account, and reading more needs the paid Pro plan. The app’s /privacy and /terms pages link here.

This service is operated by llab08, Hong Kong, and these terms are governed by the laws of Hong Kong. The section below explains this product’s data handling and current availability.

Statement reading is switched on. As of the date below, reading is switched on for the app, so an uploaded statement is read by an AI model as described here. While reading is switched off, an uploaded file is stored and not read, and nothing from it is sent to the AI gateway or to the AI model provider; this section is updated when that changes.

Account and e-mail

You sign in with an e-mail address and password, or with Google, on llab08’s own authentication server at supabase.llab08.com, the shared llab08 sign-in that other llab08 products also use. With Google, Google shares your e-mail address and basic profile details under its own privacy policy. The sign-in service sends address-confirmation and password-reset e-mails, delivered by Resend. When the app’s own e-mail is switched on, it also sends a welcome e-mail and a thank-you e-mail after a payment through Resend; as of the date below it is not switched on.

The statement files you upload

You choose and upload bank or card statement files (PDF, PNG, JPEG or TIFF, up to 10 MB). Each file is written to a private storage bucket on our own Supabase server under your user id; the bucket is not public and per-user access controls keep one account’s files out of another account’s reach. Deleting a statement in the app removes the record, its transactions and the raw file from that bucket. Removing the file from storage can fail at that moment without the app telling you, so the file can outlive the record; write to us and we remove it, as described under Deleting your data.

How a statement is read

Uploads are not parsed inside the web request. A job is placed on a queue and a separate worker process on our server picks it up, downloads the file from the private bucket and prepares it: for a PDF it takes the text printed on each page (scanned or password-protected PDFs, which the worker cannot read, are refused), and an image is turned upright, scaled down if it is very large and sent as a picture. The worker sends that text or image to llab08’s own AI gateway at sub2api.llab08.com, which runs on our server and is reached over the public internet through Cloudflare: Cloudflare ends the encrypted connection on that route, so the statement text or image passes through Cloudflare in readable form, and Cloudflare handles what it carries under its own privacy policy. The gateway passes it to a third-party AI model provider, which returns the transactions it reads. Everything printed on the statement is sent, such as your name, address, account number, balances and transactions. Your e-mail address, account identifier and the file name are not sent. The app then checks the transactions against the statement’s opening and closing balances and shows you the result, so you can correct the list before you export it.

The AI model provider

The AI model provider used through our gateway is Anthropic, with its Claude models (currently Claude Opus 5.5). Another provider may be used later only after this section is updated. Anthropic processes the statement under its own terms; we make no promise on its behalf about how long it keeps it or whether it uses it to train models.

What we keep, and for how long

With your account we keep: the statement files; the transactions read from them, with their categories, the confidence of each line, and your corrections, notes, tags and splits; each statement’s record (file name, size, type, the bank name you enter, number of pages, processing status, any error message, and a summary of the reading: the model used, the opening and closing balances, the period, the currency, the balance check and any warnings); one usage record per statement read on Pro, which counts the monthly allowance; and a record that your account has used its free statement (your user id, an identifier of that statement and the date). Files, transactions and statement records stay until you delete the statement in the app or ask us to delete the account. The usage records and the free-statement record stay when you delete a statement, so that the monthly allowance is counted correctly and the free statement is given once per account; they hold nothing from the statement itself, and they are removed only when we delete your StatementSync account at your request, as described under Deleting your data. Our worker’s logs record statement identifiers and errors, not what a statement says, and older entries are overwritten as the logs fill. Separately from your account, our AI gateway keeps its own records of the requests that pass through it, in its own database on the same server. Its request-audit log has a field for the full text of each request, so assume it holds the statement text or image the worker sent; its content-check log keeps an excerpt of a request, and its error log keeps the error a request returned. These records carry the gateway key StatementSync uses and the time of the request, but no e-mail address, account identifier or file name of yours. We have not set a deletion period for them, so assume a record stays until we delete it. To have them removed, write to hello@llab08.com with roughly when you uploaded the statements: we delete the gateway’s StatementSync records from that period. When we set a deletion period for these records, it is stated here. Copies can remain in database backups made before a deletion until those backups are replaced.

Deleting your data

Delete a statement in the app to remove it, its transactions and its file; if the file cannot be removed from storage at that moment, write to us and we remove it. The app has no button to delete the whole account. To have your StatementSync account removed, write to hello@llab08.com from the address you sign in with: that removes everything listed above, including the usage records, the free-statement record and the Stripe identifiers and payment notifications we keep, except where the law requires us to keep billing records: a payment record that Hong Kong business-record rules oblige us to hold is kept for the period the law sets and is used for nothing else. Account deletion does not reach the AI gateway’s records, because they cannot be linked to your account; ask for those in the same message, with roughly when you uploaded, and we delete them as described above. Deleting the StatementSync account does not by itself remove your shared llab08 sign-in identity, which other llab08 products also use; it is kept unless you ask in the same message to have it erased as well, as explained under shared sign-in retention and erasure. An active Pro subscription has to end before the account goes, so that nothing keeps billing you after we have deleted the only link we hold to it: cancel it in Stripe’s customer portal yourself, or ask us in the same message and we cancel it as part of the deletion.

Purchases

The paid plan (Pro, monthly or yearly) is sold through Stripe. Card details are entered on Stripe’s checkout and customer portal pages and never reach us; Stripe sends the receipts and keeps the payment records under its own terms. Stripe receives your e-mail address and our user identifier for you when your customer record is created. We keep the Stripe customer and subscription identifiers, the plan, its status and billing period so that your plan can be shown and applied in the app, and the payment notifications Stripe sends us, which can include your name and e-mail address, as billing records. These stay while your account exists and are removed with it when we delete your account at your request, apart from any payment record the law requires us to keep as a business record; what Stripe keeps is governed by its own terms.

No ads

The app shows no advertising and ships no advertising SDK. If that ever changes, this section is updated first.

Hosting

The web app runs on Vercel; storage, the database, the worker, the AI gateway and authentication run on our own server. Hosts may keep short access logs, and the web app’s logs on Vercel can include your e-mail address when an e-mail to you fails to send; we do not use them to identify anyone.

Contact: hello@llab08.com · Updated 11 October 2026 · All privacy notices