Privacy Policy
Effective Date: September 14, 2026 • Last Reviewed: September 2026
At TradeCostPro ("we", "us", or "our"), safeguarding your personal and financial data is our highest priority. This Privacy Policy outlines our strict protocols regarding the collection, handling, ephemeral in-memory processing, and non-retention of information when you access our website, statement parsing tools, and conversational AI accountant.
The TradeCostPro Ephemeral In-Memory Guarantee:
Unlike legacy document processors, TradeCostPro does NOT permanently store, archive, or sell uploaded bank statement PDF files. Statements are processed strictly in volatile computer memory (RAM) to generate your verified ledger and audit calculations. Temporary disk cache files are shredded automatically upon session completion.
1. Information We Collect
- Ephemeral Financial Documents: Bank statement PDF files and the extracted tabular transactions (dates, descriptions, amounts, balances). This data is held strictly in temporary memory during your active browser session.
- Account Registration Data: When creating an account, we collect your email address, display name, and securely hashed passwords (SHA-256 with per-user salt). We never store raw passwords.
- Transactional Records: Records of points purchases, subscription status (Free, Lite, Pro), referral credits, and invoice identifiers. We do not store raw credit card numbers; all billing is processed through PCI-DSS certified payment processors.
- Technical Logs: IP address, browser type, referring URL, and diagnostic access timestamps for DDoS mitigation, rate limiting, and fraudulent temp-mail prevention.
2. How We Use Your Information
We use the minimal necessary data solely to:
- Parse and convert bank statements into verified tables and styled Excel/PDF reports.
- Run the 7-level forensic mathematical continuity audit.
- Facilitate the Conversational AI Accountant grounded exclusively in your parsed transactions.
- Manage user account access, authentication, points ledger, and referral rewards.
- Protect against automated spam, credential stuffing, and security breaches.
3. California Consumer Privacy Act (CCPA / CPRA) Rights
Under the CCPA and CPRA, California residents have the right to:
- Right to Know & Access: Request disclosure of the categories and specific pieces of personal information collected.
- Right to Deletion: Request immediate erasure of any personal account information stored in our database.
- Right to Opt-Out of the Sale/Sharing of Personal Information: We do NOT sell, lease, or monetize your personal data or statement contents to data brokers or advertisers.
- Right to Non-Discrimination: We will never deny services or degrade features if you exercise your privacy rights.
4. European Union GDPR Compliance
For visitors in the European Economic Area (EEA) and United Kingdom, we process personal data in compliance with the General Data Protection Regulation (GDPR). Our lawful bases include:
- Performance of a Contract (Art. 6(1)(b)): To execute statement parsing and report generation requested by you.
- Legitimate Interests (Art. 6(1)(f)): To safeguard infrastructure integrity and prevent bot fraud.
5. Data Retention & Shredding Schedules
Bank statement PDFs uploaded for parsing are completely shredded from server disk within a maximum of 24 hours via automated garbage collection daemons. If you delete your user account, all associated email and points records are permanently purged within 48 hours.
6. Contact Our Data Protection Officer
To exercise any privacy rights, request data deletion, or ask questions regarding this policy, contact our compliance team at privacy@tradecostpro.com.