Privacy Policy

Ledger Pilot (“we”, “us”) operates ledgerpilot.com.au, a service that converts PDF bank statements into spreadsheet and accounting-software formats. The data controller is the operator of ledgerpilot.com.au, ABN 54 299 326 744. Contact: support@ledgerpilot.com.au.

• Account data — your email address and authentication details when you sign up.
• Uploaded statements— the PDF you upload is processed to extract transactions. See “How long we keep it” below.
• Usage data — the number of pages you convert each month, to enforce plan limits, and statistics about statement layouts (no statement contents) to improve our parsers.
• Payment data — handled by Stripe. We never see or store your full card number.
• Analytics — privacy-friendly, cookie-less usage statistics (via Cloudflare Web Analytics). No cross-site tracking.

Your uploaded PDF is encrypted, used only to extract your transactions, and automatically deleted within 24 hours of conversion. We do not retain the contents of your statements (transaction descriptions, amounts) on our systems beyond 24 hours of your conversion — we keep only your account record and monthly page-usage count, plus statistics about statement layouts (for example how many statements per bank converted, and the column layout of the statement formats uploaded). Those statistics contain no statement contents — no transactions, amounts, transaction dates, names or account details.

AI-assisted extraction.If our standard parser can't produce a result that reconciles to the cent (for example, a scanned statement or a layout it doesn't recognise yet), the whole statement may be sent to Anthropic's Claude API to extract the transactions. We only use that result if it reconciles to the cent, and the conversion result tells you when AI-assisted extraction was used. Anthropic processes the statement on our behalf under its commercial terms: it does not use it to train its models, and it deletes API inputs and outputs within 30 days — except that content flagged by its automated safety systems may be kept for up to 2 years, and data may be kept where the law requires. Our 24-hour deletion applies to our own systems.

We protect your information with encryption in transit (TLS) and at rest, access controls, and database row-level security so each account can only access its own data. The extraction service only accepts requests from our own backend. See our Security page for more detail. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

We rely on these providers to run the service:

• Supabase— database & authentication
• Stripe— subscription billing & payments
• Vercel — frontend hosting
• Fly.io — extraction service hosting
• Resend — transactional email
• Anthropic— AI-assisted extraction, only for statements our standard parser can't verify
• Cloudflare — privacy-friendly, cookieless analytics

Some providers may store or process data outside Australia (including in the United States). In particular, if a statement needs AI-assisted extraction, its full contents (transactions, balances and account details) are sent to Anthropic, which processes it outside Australia (primarily in the United States). Where providers handle data overseas, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles. We do not sell your personal information.

Under the Australian Privacy Act 1988 (and the Australian Privacy Principles) you may request access to, correction of, or deletion of your personal information. Email support@ledgerpilot.com.au. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under the Privacy Act 1988.

We send service and account emails that are necessary to run the service (for example, security, billing, and conversion-related messages). We will only send you promotional email with your consent, and you can opt out at any time using the unsubscribe link or by emailing support@ledgerpilot.com.au.

The service is intended for users aged 18 and over. We do not knowingly collect personal information from children.

We use only essential cookies required to keep you signed in. Our analytics are cookie-less.

We may update this policy; the “Last updated” date above reflects the current version. Material changes will be notified by email or in-app.