← Back to home

Privacy Policy

Last updated: January 2026

The Short Version

We process your bank statements to answer your questions. We don't keep your data, we don't sell it, and we don't want it. Your files are deleted automatically after your session.

What We Collect

When you use the tool (no account required)

  • Your uploaded files: Bank statements (PDF or CSV) are processed to extract transaction data. Files are encrypted in transit and at rest.
  • Your query: The question you ask (e.g., "How much did I pay ClassPass?") is used to find matching transactions.
  • Session data: A temporary session ID links your uploads and results. This is stored in your browser and on our server temporarily.

When you make a payment

  • Email address: Collected by Stripe for payment receipts and service notifications only. We do not use it for marketing.
  • Payment information: Handled entirely by Stripe. We never see or store your card details.

Automatically collected

  • Device identifier: A random ID stored in your browser to manage free tier usage. This is not linked to your identity.
  • IP address: Used for rate limiting and abuse prevention. Not stored long-term or linked to your financial data.

What We Don't Collect

  • We don't require an account to use the tool
  • We don't track you across websites
  • We don't use analytics that identify individuals
  • We don't store your transaction data after your session ends
  • We don't share or sell any data to third parties

How Your Data Is Protected

  • Encryption in transit: All connections use HTTPS/TLS
  • Encryption at rest: Uploaded files are encrypted while stored temporarily
  • Automatic deletion: Sessions and all associated data are automatically deleted after 1 hour
  • Manual deletion: You can delete your session and data at any time using the "Exit & Delete Session" button

Data Retention

Data TypeRetention Period
Uploaded filesDeleted after session (max 1 hour)
Transaction dataDeleted after session (max 1 hour)
Session dataDeleted after session (max 1 hour)
Payment recordsRetained by Stripe per their policy
Device identifierStored in your browser only

Third-Party Services

We use the following services:

  • Stripe: Payment processing. See Stripe's Privacy Policy

We do not use Google Analytics, Facebook Pixel, or similar tracking services.

Your Rights

You can:

  • Delete your session data at any time using the app
  • Request information about data we hold (though we hold very little)
  • Contact us with privacy concerns

Children's Privacy

This service is not intended for users under 18. We do not knowingly collect data from minors.

Changes to This Policy

If we make significant changes, we'll update the "Last updated" date above. For major changes affecting how we handle data, we'll provide notice on the homepage.

Contact

Questions about this privacy policy? Email us at hello@totalpaid.au

Pricing•FAQ•Contact•Privacy•Terms