Privacy policy
Last updated 2026-09-06 · Version française
The short version
Rowledger converts your statements inside your web browser. The files you drop into the converter are not uploaded to us or to anyone else. We cannot see, store or recover them because they never leave your device. You can confirm this by converting with your internet connection disabled.
Who is responsible for your information
Rowledger is operated by Faisal Rizwan, carrying on business as Rowledger in Ontario, Canada. Faisal Rizwan is the person accountable for this policy under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, the person in charge of the protection of personal information under the Act respecting the protection of personal information in the private sector (Law 25). Title: Owner and privacy officer. Contact: support@rowledger.com or by mail at 5 Bridlington St, Scarborough, ON M1H 2L4, Canada.
What we do not collect
- The statements you convert, or any data extracted from them.
- Account numbers, balances, transactions, names or addresses contained in them.
- The exported CSV/Excel/QBO/OFX/QIF/JSON files.
What we collect, and why
Website analytics. We use Cloudflare Web Analytics, which counts page views without cookies and without fingerprinting individual visitors. It tells us how many people visited which pages and from which country, not who they are.
In-app usage counters. The converter may record anonymous events such as "a conversion completed" or "an export was downloaded", with non-identifying technical details (page count, whether OCR was used, the detected bank name, the reconciliation result). These never include statement contents and are not linked to you. If your browser sends a Do Not Track signal, no events are sent at all.
Purchases and licenses. If you buy Rowledger Pro, the purchase is processed by our merchant of record, Polar Software Inc. ("Polar", United States). Polar collects your email address, billing country and payment details under its own privacy policy; we receive your email address, the plan purchased and a license key. When you activate a key, the converter sends the key and a device label (for example "macOS Chrome") to Polar's license server to confirm it is valid. Your statements are not involved in this exchange.
Support email. If you email us, we keep the correspondence to handle your request. Support messages are triaged and drafted with the help of AI systems (currently Google Gemini and Anthropic Claude); every thread is reviewed by a person, and automated replies say so. Those providers process the message content under their business terms and do not use it to train their models. Please do not send statement contents by email; if we ask for a failing layout, send a redacted page only.
Newsletter. We send product news only to people who ticked the box asking for it. Every message identifies us, includes our mailing address, and has a working unsubscribe link that we honour within 10 business days (usually immediately).
Service providers and where your data is stored
| Provider | Purpose | Location |
|---|---|---|
| Polar Software Inc. | Checkout, invoices, taxes, license keys, refunds | United States |
| Cloudflare, Inc. | Hosting, email forwarding, aggregate analytics | United States and its global network |
| Google LLC | Support mailbox and AI-assisted drafting | United States |
| Anthropic PBC | AI-assisted drafting of support replies | United States |
Your purchase email and support correspondence are therefore stored or processed outside Canada and may be accessible to authorities there under local law. For Quebec residents: we assessed these transfers as Law 25 requires before choosing these providers, and each provider is bound by written terms that limit how it may use the information.
How long we keep it
- Purchase records: six years after the year of purchase (Canadian tax record-keeping rules).
- Support correspondence: up to 24 months after the request is closed.
- Analytics: only aggregate totals are kept; raw events are discarded by Cloudflare after a limited period.
- Newsletter address: until you unsubscribe, then only a suppression record so we do not email you again.
Your rights
You can ask what personal information we hold about you, have it corrected or deleted, withdraw consent, or (Quebec) receive it in a structured, commonly used format. Email support@rowledger.com; we answer within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or your local data protection authority. For visitors in the EEA and the UK, our legal bases are legitimate interest (analytics, security) and performance of a contract (purchases and licensing), and you have the rights set out in the GDPR and UK GDPR.
Automated decisions
No decision that affects you is made solely by automated means. Refund requests that fall inside our published refund policy are approved for everyone as a matter of policy; anything outside it is decided by a person.
Local storage
The converter stores your preferences, categorization rules and license status in your browser's local storage so they persist between visits. Statement data is not stored. Clearing site data removes everything.
Security incidents
If a breach of our safeguards creates a real risk of significant harm to you (or, for Quebec residents, a risk of serious injury), we will notify you and the relevant regulator as the law requires. We keep a record of every incident.
Children
Rowledger is not directed at children under 16.
Changes
We will post changes on this page with a new date. Material changes to how purchases are handled will be announced to license holders by email.
Contact
Faisal Rizwan, Owner and privacy officer · support@rowledger.com · 5 Bridlington St, Scarborough, ON M1H 2L4, Canada