Privacy policy
Last updated 2026-10-18 · Version française
The short version
Rowledger converts your statements inside your web browser. The files you drop into the converter are not uploaded to us or to anyone else. We cannot see, store or recover them because they never leave your device. You can confirm this by converting with your internet connection disabled.
Who is responsible for your information
Rowledger is operated by Faisal Rizwan, carrying on business as Rowledger in Ontario, Canada. Faisal Rizwan is the person accountable for this policy under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, the person in charge of the protection of personal information under the Act respecting the protection of personal information in the private sector (Law 25). Title: Owner and privacy officer. Contact: support@rowledger.com or by mail at 5 Bridlington St, Scarborough, ON M1H 2L4, Canada.
What we do not collect
- The statements you convert, or any data extracted from them.
- Account numbers, balances, transactions, names or addresses contained in them.
- The exported CSV/Excel/QBO/OFX/QIF/JSON files.
What we collect, and why
Website analytics. We use Cloudflare Web Analytics, which counts page views without cookies and without fingerprinting individual visitors. It tells us how many people visited which pages and from which country, not who they are.
In-app usage counters. The converter may record anonymous events such as "a conversion completed" or "an export was downloaded", with non-identifying technical details (page count, how many pages the file has, whether OCR was used, the detected bank name, the reconciliation result, or that the free allowance cut a long file short). These never include statement contents and are not linked to you. If your browser sends a Do Not Track signal, no events are sent at all.
Layout fingerprint, only when a statement does not reconcile. If the balance check on a conversion does not fully pass, the converter also records a structural description of how the statement was read: whether it looked like a bank account or a credit card, the date and number formats, the order of the column types (for example "amount, balance, other"), how many balance checks passed out of how many, the positions of the rows that failed, how many rows have no printed running balance and whether they sit before, among or after the rows that do, how many rows were left out as outside the balance, and counts of internal row warnings. It records no text from your statement: no descriptions, names, account numbers, dates or amounts. The size of any balance difference is kept only as a range ("under 1", "under 100" or "100 or more"). The purpose is to find layouts we read wrongly and fix them. A conversion that reconciles records none of this, and the Do Not Track signal switches it off too.
Feedback you choose to send. After an export, the converter may ask whether it did what you needed. If you answer, we receive the option you picked, any words you type, and your email address if you choose to give one — nothing else, and only when you press Send. We also store the detected bank name and reconciliation result alongside it so a reported problem can be reproduced. Your statement and everything read from it stay on your device: the converter runs in your browser and has nothing to upload. We keep feedback for up to 24 months to fix the parser and decide what to build, and we delete it sooner on request. If you would rather not send anything to this site, the form offers a plain email link instead. Giving an email address is optional and is used only to reply to you; it is never added to a mailing list.
Purchases and licenses. If you buy Rowledger Pro, the purchase is processed by our merchant of record, Polar Software Inc. ("Polar", United States). Polar collects your email address, billing country and payment details under its own privacy policy; we receive your email address, the plan purchased and a license key. When you activate a key, the converter sends the key and a device label (for example "macOS Chrome") to Polar's license server to confirm it is valid. Your statements are not involved in this exchange.
Support email. If you email us, we keep the correspondence to handle your request. Support messages are triaged and drafted with the help of AI systems (currently Google Gemini and Anthropic Claude); every thread is reviewed by a person, and automated replies say so. Those providers process the message content under their business terms and do not use it to train their models. Please do not send statement contents by email; if we ask for a failing layout, send a redacted page only.
Newsletter. We send product news only to people who ticked the box asking for it. Every message identifies us, includes our mailing address, and has a working unsubscribe link that we honour within 10 business days (usually immediately).
Service providers and where your data is stored
| Provider | Purpose | Location |
|---|---|---|
| Polar Software Inc. | Checkout, invoices, taxes, license keys, refunds | United States |
| Cloudflare, Inc. | Hosting, email forwarding, aggregate analytics | United States and its global network |
| Google LLC | Support mailbox and AI-assisted drafting | United States |
| Anthropic PBC | AI-assisted drafting of support replies | United States |
Your purchase email and support correspondence are therefore stored or processed outside Canada and may be accessible to authorities there under local law. For Quebec residents: we assessed these transfers as Law 25 requires before choosing these providers, and each provider is bound by written terms that limit how it may use the information.
How long we keep it
- Purchase records: six years after the year of purchase (Canadian tax record-keeping rules).
- Support correspondence: up to 24 months after the request is closed.
- Analytics: only aggregate totals are kept; raw events are discarded by Cloudflare after a limited period.
- Newsletter address: until you unsubscribe, then only a suppression record so we do not email you again.
Your rights
You can ask what personal information we hold about you, have it corrected or deleted, withdraw consent, or (Quebec) receive it in a structured, commonly used format. Email support@rowledger.com; we answer within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or your local data protection authority. For visitors in the EEA and the UK, our legal bases are legitimate interest (analytics, security) and performance of a contract (purchases and licensing), and you have the rights set out in the GDPR and UK GDPR.
Automated decisions
No decision that affects you is made solely by automated means. Refund requests that fall inside our published refund policy are approved for everyone as a matter of policy; anything outside it is decided by a person.
Local storage
The converter stores your preferences, categorization rules and license status in your browser's local storage so they persist between visits. Statement data is not stored. Clearing site data removes everything.
Security incidents
If a breach of our safeguards creates a real risk of significant harm to you (or, for Quebec residents, a risk of serious injury), we will notify you and the relevant regulator as the law requires. We keep a record of every incident.
Children
Rowledger is not directed at children under 16.
Changes
We will post changes on this page with a new date. Material changes to how purchases are handled will be announced to license holders by email.
Contact
Faisal Rizwan, Owner and privacy officer · support@rowledger.com · 5 Bridlington St, Scarborough, ON M1H 2L4, Canada