Privacy

RowRecon is operated by Shift Warden LLC. Effective date: September 11, 2026. Last updated: September 11, 2026.

Local conversion

Statement conversion, including local OCR when used, runs in your browser. The PDF, OCR text, transactions, balances, names, account numbers, and page images are not uploaded to RowRecon to convert the file or to take payment.

Support

If you submit a support case, we store category, description, optional email, and privacy-safe diagnostics (parser mode, layout id, page-count bucket). We do not attach the statement. Email is used only to respond, not for marketing unless you later opt in through a separate control (none exists today).

Payments

Optional Pro checkout is processed by Stripe. RowRecon stores limited billing, entitlement, legal-consent, support, and access-recovery information needed to provide paid access: Stripe customer/session/ subscription identifiers, product/price ids, entitlement type and status, pass grant and expiry timestamps, normalized email for access recovery, Terms/Privacy/Refund Policy versions accepted, acceptance timestamp, and refund-case metadata. We do not store raw card numbers. Bank statements, OCR text, extracted transactions, balances, and account numbers are not uploaded to RowRecon for normal statement conversion.

Analytics

We may store coarse events (page view, conversion success/failure without amounts, download, copy of privacy-safe diagnostics, support, checkout). An anonymous cookie identifies the browser. The host may collect traffic and performance metrics (Vercel Web Analytics and Speed Insights). We do not record statement contents.

Cookies

Necessary cookies: anonymous analytics id, CSRF, optional Pro entitlement, access-recovery session, operator session, optional internal-test marker. No advertising cookies. All cookies are HttpOnly, Secure in production, SameSite=Lax, and signed.

Access recovery

If you purchased Pro and need to restore access on another browser or device, you can request a one-time restore link using the email from your Stripe checkout. We store a hashed, short-lived verification token — never the token itself in plaintext after creation. No bank statement, card number, or password is involved in recovery.

Retention and deletion

Support and billing records are kept as long as needed for support, tax, accounting, security, and dispute handling. You can request deletion of eligible personal data via support. We cannot delete a PDF we never received.

Security

We use reasonable safeguards. No security measure is perfect. See /security to report issues.