Privacy
Xvert converts bank statement PDFs into spreadsheets. Bank statements are about as sensitive as personal data gets, so this page states plainly what happens to yours.
Your statements are never stored
When you upload a statement it is held in memory while it is converted, kept only long enough for you to download the result, and then discarded. It is never written to disk, never added to a database, and never included in a backup. If you do not download within 30 minutes, the conversion is gone and you would need to upload again.
This is a deliberate design decision rather than a policy promise. There is no storage layer for statement contents to sit in.
What is kept
If you have an account, we keep a record of each conversion:
- which bank the statement was from
- how many pages and how many transactions it contained
- whether it reconciled
- the file name, who ran it, and when
- how many credits it used
This is what your usage history and billing are built from. It does not include any transaction, balance, account number, or narration from the statement itself.
Your account
We store your email address, which is how you sign in. There is no password: signing in sends a one-time link to your inbox, so we never hold a password for you at all.
Payments
Payments are processed by Paystack. Card details are entered on Paystack's systems and are never seen by, sent to, or stored by Xvert. We keep a record of which credit pack was bought, when, and for how much.
Who else sees your data
We do not sell data, and we do not share it for advertising. These providers process data on our behalf:
- Render — runs the application and database (Frankfurt, EU)
- Resend — delivers sign-in emails
- Paystack — processes payments
- Mistral AI — reads invoices you upload, and bank statements that are scanned images. Never a statement PDF from your bank.
Invoices are read by Mistral AI
A statement PDF from your bank never leaves Xvert: it is read on our own server, and nothing in it is sent to anyone. Invoices, and statements that are scanned images, are different, and we would rather say so here than have you assume otherwise.
When you upload an invoice, its text is sent to Mistral AI, which identifies which printed figure is the subtotal, the VAT, the total and each line. Xvert then checks those figures itself. A scanned or photographed invoice is sent as an image to be read with OCR, and may be sent a second time to check a figure that did not add up.
Only the invoice you uploaded is sent — nothing about your account. We use Mistral's paid API, with our account set so that what we send is not used to train its models. Everything else on this page applies to invoices too: they are held in memory, never written to our disk, and discarded after 30 minutes.
Scanned statements are read by Mistral AI
A scanned or photographed statement has no text in it for our server to read. When you convert one, its pages are sent to Mistral AI to be read with OCR, and Xvert then checks every row against the statement's own running balance. A scan that does not add up is refused rather than handed over.
Only scans are sent, and only when you are signed in: a statement PDF from your bank is always read on our own server. The same terms apply as for invoices — Mistral's paid API, with our account set so that what we send is not used to train its models — and the statement is still held in memory, never written to our disk, and discarded after 30 minutes.
Your statements and invoices are not used to train anything
Uploaded files are not used to improve the service, train models, or for any purpose other than producing the file you asked for.
Deleting your account
Email us and we will delete your account and its history. Statement contents require no deletion request, because they were never kept.
Contact
Questions about any of this: support@xvertapp.com