Data Retention Policy
Last updated: July 2026
Retention at a glance
- Uploaded document - deleted immediately after conversion completes or fails.
- Generated spreadsheet - removed automatically, and always within 30 minutes.
- Extracted text and figures - never stored separately; they exist only in memory during conversion.
- Account data - none, because the service has no accounts.
- Technical server logs - retained short-term for operations and abuse investigation.
Why so short
The most reliable way to protect a sensitive document is not to hold it. A service that retained bank statements would become a target worth attacking; one that deletes them within minutes largely removes that risk.
It does mean there is no file history and no way to re-download a conversion later. That is a deliberate trade-off in favour of privacy. If you need the spreadsheet again, convert the document again.
Deletion mechanics
The uploaded original is unlinked from disk as soon as the conversion routine returns. Generated files carry a creation timestamp and anything past the 30-minute threshold is swept away by a routine cleanup. Download links contain a long random identifier, are never listed anywhere, and stop working once the file is gone.
Backups
We do not back up user documents or generated output. Nothing survives in a backup after the deletion described above.