Πολιτική απορρήτου

BankStatementMatcher is operated by an individual (a sole operator), not a registered company. For the purposes of the GDPR and other data-protection laws, the data controller responsible for your personal data is the operator of the Service, who can be contacted at:

If the Service later begins operating through a registered company, this section will be updated with the company's legal name, registration number and registered address.

Όταν ανεβάζετε ένα bank statement και ένα αρχείο αναφορών, τα επεξεργαζόμαστε για να εξάγουμε συναλλαγές και να υπολογίσουμε αποτελέσματα αντιστοίχισης. Δεν πουλάμε τα δεδομένα σας.

The data you upload is processed securely using encryption in transit (HTTPS/TLS). Our systems are designed to handle sensitive financial information with care, following industry best practices for data protection.

If you use our receipt-scanning and receipt-matching features, the receipts, invoices, and supporting documents you upload are processed to extract line items, totals, dates, and vendor details, and to match them against your transactions. These documents are treated with the same care as bank statements: they are processed to provide the feature and are not sold or used for advertising.

Raw uploaded receipts are removed once processing is complete; the extracted, structured results are retained subject to the retention window described below so you can view and export them.

If you use the Service as an accountant, bookkeeper, or on behalf of multiple clients, you may upload and process financial documents that relate to your clients rather than to you personally. In that case you act as the data controller for your clients' data and we act as your data processor, processing that data only on your instructions to provide the Service.

You are responsible for having an appropriate legal basis to upload your clients' data. Business customers who process personal data of third parties should also review our Data Processing Agreement (DPA).

Από προεπιλογή, τα αρχεία διαγράφονται μετά την επεξεργασία. Τα αποτελέσματα μπορεί να αποθηκευτούν προσωρινά για την εμφάνιση της οθόνης αποτελεσμάτων και εξαγωγών. Αν χρειάζεστε μεγαλύτερη διατήρηση, χρησιμοποιήστε το API και ρυθμίστε τη διατήρηση στον λογαριασμό σας.

Raw uploaded bank statements and reference files are deleted as soon as a job has finished processing. The extracted, structured results and exports are retained for a limited retention window (30 days by default) and are then automatically purged. You can also delete an individual job, or your entire account and all associated data, at any time from your account settings — this removes both the stored files and the related records.

We collect the following types of information:

• Account Information: Email address, name, and authentication credentials
• Usage Data: Upload history, matching statistics, and API usage
• Payment Information: Billing details processed through secure payment providers
• Technical Data: IP address, browser type, and device information

We use your information to:

• Provide and maintain the Service
• Process your uploads and generate matching results
• Send important service notifications and updates
• Improve our algorithms and service quality
• Respond to support requests
• Prevent fraud and ensure security

Χρησιμοποιούμε τυπικές πρακτικές ασφάλειας (κρυπτογράφηση κατά τη μεταφορά, πρόσβαση ελάχιστων δικαιωμάτων και αρχεία καταγραφής ελέγχου).

Our security measures include:

• TLS/SSL encryption for all data in transit
• Encryption at rest where provided by our hosting infrastructure
• Prompt deletion of raw uploads after processing
• Role-based access controls (RBAC)
• Comprehensive audit logging
• Secure authentication with MFA support

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: Third-party vendors who help us operate the Service (e.g., hosting, payment processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually obligated to protect your data and use it only for authorized purposes.

We rely on a small number of trusted third-party sub-processors to operate the Service. Each is bound by data-protection obligations and processes data only as needed to provide their function:

We will keep this list current and give notice of material changes to our sub-processors. Bracketed entries indicate providers to be confirmed for your deployment.

The Service can connect to third-party platforms and tools at your direction — for example via API keys, webhooks, or e-commerce and accounting integrations. When you enable an integration, data is exchanged with that platform only to perform the actions you have configured (such as importing transactions or exporting results).

Data you send to or receive from a third-party platform through an integration is also governed by that platform's own privacy policy and terms. You can revoke an integration or delete its API key at any time from your account settings, which stops further data exchange.

Depending on your location, you may have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us using the information below.

If you are located in the European Economic Area (EEA), we process your data in accordance with the General Data Protection Regulation (GDPR). Our legal basis for processing includes:

• Contract performance: Processing necessary to provide the Service
• Legitimate interests: Improving and securing the Service
• Consent: When you explicitly opt-in to optional features

We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage patterns. You can control cookies through your browser settings. Essential cookies are necessary for the Service to function properly.

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data during international transfers.

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the Service. Your continued use after changes indicates acceptance of the updated policy.

Για ερωτήσεις σχετικά με το απόρρητο, επικοινωνήστε μαζί μας μέσω της σελίδας Επικοινωνίας.

Email: privacy@bankstatementmatcher.com

The Service performs automated matching, extraction, categorisation and analysis, and any results, insights or reports it produces are provided for convenience and information only. They may be incomplete or inaccurate and do not constitute accounting, auditing, tax, financial, investment, legal or other professional advice. You are solely responsible for independently reviewing and verifying the results before relying on them, and you should consult a qualified professional where appropriate.

The Service may link to or interoperate with third-party services that you choose to use, including payment processors, banks and financial institutions, e-commerce platforms, accounting software, and other integrations. Those services are operated by third parties under their own terms and privacy policies. We do not control and are not responsible for the privacy practices, security, availability, or content of any third-party service, and any data you exchange with them is governed by that provider's own policies. Your use of third-party services is at your own risk.