Privacy Policy

Last updated: March 2026

AI-Powered Processing

StubToCSV uses AI to extract data from your documents. Your PDF is converted to images in your browser and sent to our secure AI processing pipeline for extraction. The document data is processed in real-time and immediately discarded — it is never stored, logged, or retained on any server. No human ever views your documents. When you close the tab, all local data is gone.

No Document Storage

We do not store or retain the contents of any financial document you process through StubToCSV. Document images are transmitted securely (HTTPS) for AI extraction and immediately discarded after processing. No file data, extracted text, or parsed fields are persisted on our servers. Your extracted results are returned directly to your browser.

Pro Account Data

If you create a Pro account, we store the minimum information needed to manage your subscription:

  • Email address (used for sign-in and account communications)
  • Plan status (free, Pro, or Single conversion)
  • Conversion metadata: document type and date of conversion

We do not store the contents of your documents, extracted data, or generated CSV/Excel files.

Authentication & Cookies

StubToCSV uses magic-link email sign-in powered by Resend. We use HTTP-only, Secure session cookies for authentication. These cookies contain only your session identifier and are not used for tracking or advertising.

Payment Processing

All payment processing is handled by Stripe. We never receive, store, or have access to your credit card number or full payment details. Stripe provides us only with a payment confirmation and subscription status.

Anonymous Usage Tracking

To enforce free-tier conversion limits, we store an anonymous UUID and a hashed IP address in Cloudflare KV. This data is used solely for rate limiting and is not linked to any personal information. We do not use third-party analytics, tracking pixels, or advertising scripts.

Transactional Email

We use Resend to send transactional emails, specifically magic-link sign-in messages. We do not send marketing emails, newsletters, or share your email with third parties.

Data Retention

  • Session data expires after 30 days of inactivity
  • Anonymous usage counters are purged after 45 days
  • Account data is retained while your account is active and deleted upon request

Your Rights

You may request deletion of your account and all associated data at any time by contacting us. Since document data is processed in real-time and immediately discarded, there is no document data for us to delete.

Contact

For privacy questions or data deletion requests, email us at support@stubtocsv.com.