Privacy Policy

• Account information: name, email address, and password (stored as a salted hash, never in plain text).
• Your documents: files you upload (bank statements, spreadsheets, PDFs, photos of paper documents) and text/data extracted from them.
• Linked bank data: if you connect an account via Plaid, an encrypted access token and account balance/transaction snapshots you choose to import.
• Generated statements: the balance sheets, income statements, and cash flow statements Bylanz produces from the above.
• Billing information: if you subscribe to a paid plan, our payment processor (Stripe) collects your payment card details directly — Bylanz never receives or stores your full card number.
• Usage data: basic technical logs (e.g. request timestamps, error logs) needed to operate and secure the Service.

We use the information above to:

• Provide the core Service — extracting data from your documents and generating statements;
• Authenticate you and maintain your account;
• Process subscription payments and enforce plan usage limits;
• Communicate with you about your account or the Service;
• Detect, investigate, and prevent abuse, fraud, or security incidents;
• Improve the Service's reliability and accuracy.

We do not sell your personal information or your documents.

To generate statements, the text and images of your uploaded documents (and any snapshot data imported via Plaid) are sent to a third-party AI model provider (Anthropic) for processing. That provider processes this data to return the extracted, standardized output back to Bylanz; see Anthropic's own privacy and data-usage policies for how they handle API data.

Bylanz relies on the following categories of subprocessors to operate:

• AI processing: Anthropic (document extraction and statement generation).
• Bank data: Plaid (optional bank account linking and data aggregation).
• Payments: Stripe (subscription billing; handles your payment details directly).
• File storage: Cloudflare R2 (stores your uploaded documents).
• Database: Neon (stores your account, statement, and metadata records).
• Hosting: Vercel (runs the application).

Each of these providers only receives the data necessary to perform its specific function and is contractually or by policy restricted from using it for unrelated purposes.

Documents are stored in access-controlled cloud storage; Plaid access tokens are encrypted at rest. Passwords are hashed, never stored in plain text. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

We retain your account data, documents, and generated statements for as long as your account is active. If you delete your account, we will delete or anonymize your personal data and documents within a reasonable period, except where we are required to retain records (e.g. billing records) for legal or accounting purposes.

You can access, update, export, or delete your documents and statements directly within the app. You may request deletion of your account and associated data by contacting us. Depending on where you live, you may have additional rights under applicable data protection law (such as the right to access, correct, or delete your personal data, or to object to certain processing).

Bylanz uses essential cookies to keep you signed in and maintain your session. We do not use third-party advertising or tracking cookies.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this Privacy Policy, or requests to access, export, or delete your data, can be sent to support@bylanz.com.