Privacy

Last updated 20 October 2026. Operated by Mailotte Ltd (“we”).

What happens to your statement

Your PDF is read in memory for the duration of one request and then discarded. We do not write it to disk, to a database, to object storage, or to a log. We keep no copy, and there is no feature that would let us retrieve one later.

The one thing we cannot do in-house

To read the statement’s table we send its contents to Anthropic’s API, which acts as a processor for us. For a statement with a text layer we send the extracted text; for a scanned statement we send the PDF itself, because there is no text to extract. This is necessary for the service to work and you should not upload a statement you are not willing to have processed this way. See Anthropic’s privacy policy.

No other third party receives your statement.

What we do store

• A salted hash of your IP address and a daily counter. This enforces the free limit. The address itself is never stored, and the hash is salted so it cannot be reversed by hashing the address space.
• If you buy credits: a random credit token, its remaining balance, and the email address you gave Stripe. The email exists so a lost token can be restored by hand.

There are no accounts and no passwords. Your credit token is the only credential, and it is held by your browser.

Payments

Card details are handled entirely by Stripe and never reach us. We receive confirmation that a payment succeeded, the amount, and your email.

Cookies

None. Your credit token is kept in your browser’s local storage, which is not sent to us automatically and is not used for tracking.

Retention

Statements: not retained. Usage counters: retained while the limit applies. Credit tokens and purchase emails: retained while the credits are unspent, and as long as tax law requires for the transaction record.

Your rights

Under UK and EU data protection law you may request a copy of the personal data we hold about you, ask for it to be corrected or erased, or object to its processing. Because we do not keep your statements, such a request concerns only your purchase record. Contact statement-proof@mailotte.com; we respond within 30 days. You may also complain to the ICO.