Privacy Policy

Effective Date: 6 May 2026

Company: Uncommon Goods Lab Pte. Ltd. (UEN 202509282G), Singapore

This document is written in English. The English version governs in the event of any conflict with a translation.

This Privacy Policy explains how Uncommon Goods Lab Pte. Ltd. ("we", "us", or "our") collects, uses, and protects information when you use Bankstatemently, including its website, API, MCP server, and related tools (the "Service").

1. Information We Collect

Uploaded files (e.g. bank statements) to provide our conversion services
Basic account details (e.g. name, email, payment info) when you sign up
Technical data (e.g. browser type, usage patterns) for improving the Service

The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

2. How We Use Information

To process and convert uploaded files into structured data formats
To improve parsing accuracy and extraction quality across statements
To develop and maintain extraction templates for new banks and formats, which may include identifying structural patterns across documents to improve parsing accuracy and expand supported formats
To debug issues and ensure Service reliability
To provide customer support and billing
To improve the Service and maintain security

Processing may involve automated systems, including OCR and AI models, to extract structured data from uploaded documents.

Important: We do not sell or share your data with third parties for marketing purposes. We do not use customer documents to train models in a way that retains or reproduces personal data.

3. Data Storage & Security

Encryption in transit: All data is transmitted over HTTPS/TLS. We enforce HTTPS on all connections — unencrypted HTTP requests are automatically redirected.
Encryption at rest: Uploaded files and extracted data are stored in encrypted databases and storage buckets. Encryption is applied at the infrastructure level.
Data retention: Depends on your account type.
- Free / anonymous: files and results deleted within 24 hours
- Credit pack or subscription: files and results retained while your account is active, unless you request earlier deletion
- After account closure or deletion: files and results deleted within 24 hours
Isolated processing: Each file is processed in isolation. We do not commingle data between users or accounts.
Cookies & tracking: We and our analytics providers use cookies and similar tracking technologies to understand how the Service is used. You can manage cookie preferences through your browser settings or our cookie banner.
Third-party service providers: We use third-party service providers to operate and improve the Service:
Authentication— Clerk
Database & storage— Supabase
Document processing— Anthropic, Google (Gemini), OpenAI, and/or self-hosted open-source models
Hosting & infrastructure— Vercel, Fly.io
Analytics— PostHog, Google Analytics
Error tracking— Sentry
Logging & monitoring— Better Stack
Email delivery— Brevo, Google
These providers may process uploaded documents and related data as necessary to support the operation of the Service.
Data breach notification: In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
Derived templates: We create and maintain extraction templates based on patterns identified in processed statements. These templates contain only structural and formatting information (e.g. column positions, data markers) and do not retain or reproduce personal data. Templates are used only to improve accuracy for future processing of similar statements. Derived templates do not contain personal data and are not subject to deletion requests.

4. Legal Compliance & Data Protection

We process personal data in accordance with applicable data protection laws, including those of Singapore (PDPA).

If you are located in the EU/EEA, we aim to process your data in accordance with the General Data Protection Regulation (GDPR), where applicable. Our legal basis for processing is contract performance (providing the Service you requested) and legitimate interest (improving the Service).

Under the GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten")
Restrict or object to processing
Data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at help@bankstatemently.com. We will respond within 30 days.

If you are processing personal data on behalf of your organisation and require a Data Processing Agreement (DPA), please contact us to request one.

5. Your Choices

You may request a copy of the personal data we hold about you by contacting us
You may request deletion of your account and uploaded files by contacting us
You may opt out of non-essential communications at any time

6. Changes to This Policy

We may update this Privacy Policy at any time. If we make material changes, we will notify you by email or by posting a notice in the Service. Your continued use of the Service after changes take effect constitutes your acceptance of the updated Privacy Policy.

7. Contact Us

For questions, requests, or concerns about this Privacy Policy: help@bankstatemently.com

← Back to Home