Bank Statement Converter from Taxomate

Privacy policy

Effective September 1, 2026

What we process

Taxomate Capture processes the bank or credit-card statement files and filenames you choose to upload; statement dates and balances; extracted transaction dates, descriptions, amounts, and confidence or review warnings; corrections you make; CSV or QBO exports generated when you request them; service-generated statement and row identifiers; and the account and security information needed to provide the service.

Documents you may upload

Upload only bank-issued statements with masked account or card numbers. Do not upload full payment-card numbers, card security codes, government identifiers, passwords or authentication secrets, or health information. Taxomate Capture checks extractable document text for common restricted-data patterns; when detected, extraction is rejected and the uploaded source file is deleted. This automated check is a safeguard, not a guarantee, so you remain responsible for reviewing and redacting documents before upload.

How we use the data

We use this data only to authenticate you, extract and validate statement transactions, show review issues, generate requested exports, provide support, prevent abuse, and operate and improve the service. We do not sell statement data or use it for advertising.

ChatGPT and plugin use

When you use Bank Statement Converter from Taxomate through ChatGPT or Codex, OpenAI sends the tool requests you authorize to Taxomate Capture. Tool responses may contain filenames, statement and row identifiers, extracted transactions, balances, confidence and review warnings, reconciliation and export status, whether you chose to save a conversion to your account, and requested CSV or QBO content. OAuth tokens, account identifiers, operational timestamps, traces, logs, internal debug payloads, and uploaded PDF bytes are not returned in tool responses.

Storage and deletion

Authenticated uploads are isolated to your Taxomate Capture account. A temporary conversion is automatically eligible for deletion after 24 hours. If you explicitly choose to save a conversion to your account, it is automatically eligible for deletion after 30 days unless a shorter period is configured. Hourly cleanup permanently removes eligible conversions, their extracted transaction data, and their private source PDFs. You may delete either kind sooner from Taxomate Capture. CSV and QBO exports are generated on request and are not retained by Taxomate Capture after the response. Backups and security logs may persist for a limited operational period.

Service providers and security

We use infrastructure, private object-storage, transactional-email, and monitoring providers to operate the service. These providers process data only as needed to host private files, run extraction, deliver account email, monitor reliability, or provide support. We limit their access to what is necessary, use encrypted transport, store OAuth access and refresh tokens only as one-way digests, and scope access to the authenticated account. No security system is perfect, so please upload only documents needed for the conversion.

For pilot measurement, signup links may carry campaign parameters such as source, campaign, keyword, landing page, or an advertising click identifier. We associate those parameters with account-level milestones such as verification, statement upload, extraction result, export download, support request, and your optional QuickBooks import outcome. We do not place filenames, statement contents, transactions, balances, or support-message text in acquisition analytics.

Your choices

You can review, correct, export, or delete statement conversions in your account. Contact support@taxomate.com to request help with access, correction, deletion, or privacy questions.