Trust Center
A factual overview of who operates the service, what happens to uploaded data, which providers are involved, and where to find the detailed policies behind each claim.
Last updated: August 4, 2026
Quick summary
- Uploaded bank statement files are processed to generate results, then discarded instead of being kept as raw PDFs or images.
- Structured analysis data is stored only as needed to show results and support account history.
- PostHog measures product usage and conversion. Inputs are masked, and replay is disabled on sensitive app pages.
- No bank-login or bank-API connection is required. Users upload documents directly.
- Detailed security, retention, AI, and subprocessors information is linked below.
Service operator
Brand: mybankstatementanalysis
Operator: DPmedia
Founder: Dawid P.
Jurisdiction: Poland, European Union
Primary contact: contact@mybankstatementanalysis.com
What happens to an uploaded statement
1. Upload
A PDF or image is sent to the application over HTTPS so the service can read and process it.
2. Extract
OCR is used when the statement is scanned or image-based. AI and parsing logic then extract dates, descriptions, and amounts.
3. Store only results
The application keeps the structured analysis output needed to show results and history. It does not keep the original uploaded statement as a raw file.
4. Delete on schedule or on request
Retention depends on whether the analysis is anonymous, free-plan, or paid-plan. Users can also delete analyses manually.
Retention snapshot
Uploaded PDF or image file
Retention: Only while it is processed (at most 1 day)
Reason: Read to extract transactions and generate results. Large uploads are staged in encrypted Cloudflare R2 storage for the processing request.
Anonymous analysis results
Retention: 7 days
Reason: Allows users without an account to revisit a recent analysis.
Free account analysis results
Retention: 30 days
Reason: Lets free users review recent analyses without keeping data indefinitely.
One-time paid report
Retention: 1 year
Reason: Gives one-time buyers a practical window to revisit the report they paid to unlock.
Full retention details live on the data retention page.
Current subprocessors
The current stack includes infrastructure, payment, OCR, AI, and limited support or analytics providers. The complete list is published on the subprocessors page.
- Cloudflare — Hosting, database, and file staging. Runs the web application and API (Workers and Containers), stores structured analysis results and account data (D1), and briefly stages large uploads (R2).
- Google Gemini API — AI processing. Helps categorize transactions and power AI-assisted analysis features.
- Polar — Payments. Billing provider for subscriptions, one-time purchases, checkout, and customer portal flows.
- PostHog — Product analytics and session replay. Measures traffic, product funnels, conversion, and aggregated product usage.
Detailed pages
High-level security and privacy safeguards for uploads, storage, and account access.
Current infrastructure, payments, support, and analytics providers.
What is kept, for how long, and how deletion works.
Where AI is used, where it is not, and what users should review manually.
How to report a security issue responsibly.