Security

Your uploaded PDF is encrypted, used only to extract your transactions, and deleted as soon as processing finishes. The extracted results are removed on the same 24-hour clock — nothing about the substance of your statement (descriptions, amounts, balances) is retained beyond 24 hours of your conversion. We hold only your account record and a monthly page-usage count.

The contents of your statements are never used to train AI models — ours or anyone else's. Extraction runs on deterministic parsing built for each bank's statement layout, and your data is used for one thing only: producing your export.

Bank statements are self-checking: the opening balance plus credits minus debits must equal the closing balance. We run that reconciliation on every conversion, to the cent. If the numbers don't add up — a page failed to read, a row went missing — we flag the discrepancy instead of handing you a file that silently looks complete.

Statement extraction runs on our service hosted in Sydney, Australia. Like most modern web applications, we also use trusted global providers for hosting, storage, authentication and payments (Vercel, Cloudflare, Supabase, Stripe) — with all data encrypted in transit and at rest.

All data is transmitted over TLS 1.2+ (HTTPS). Data held by our infrastructure providers is encrypted at rest using their platform defaults.

Payments are processed by Stripe, a PCI-DSS Level 1 provider. Your card details go directly to Stripe — Ledger Pilot never sees or stores your full card number.

Accounts are secured by Supabase Auth. Database access is protected by row-level security so that each account can only read its own data. The extraction service only accepts requests from our own backend.

We collect the minimum needed to run the service: your email, your subscription status, and how many pages you've converted this month. Nothing about the substance of your statements is retained beyond 24 hours of your conversion.

Found a vulnerability? Please email support@ledgerpilot.com.au and give us a reasonable chance to fix it before public disclosure. We appreciate your help.