Privacy Policy
Last updated: 28 October 2026
This policy explains what personal data StatementDock collects, why, and what you can do about it. StatementDock (statementdock.com) is run by Orosfort Private Limited (CIN U36996TN2022PTC156746), No. 1603, Floor 16, Emerald, Godrej Azure, Padur, Rajiv Gandhi Salai, Chennai, Tamil Nadu 603103, India (“StatementDock”, “we”, “us”).
1. Your files stay on your device
The StatementDock converter processes your files in your web browser. We do not upload, store or see your bank statements, the transactions in them, account numbers or PDF passwords. When you close the page, that data is gone unless you saved the output file yourself.
2. What we collect
| Data | Where it comes from | Why we need it |
|---|---|---|
| Name, email address, profile photo (Google only) and a user ID | You, when you sign up with an email address, or Google, when you sign in with Google | To create and run your account |
| Password, if you sign up with an email address | You | To let you sign in. It is stored by our sign-in provider (Google Firebase) in scrambled form that we cannot read. We also email you to verify your address and, if you ask, to reset your password |
| Plan, plan expiry and usage counts (for example, pages converted today) | Created when you use the tools | To apply free limits and paid plans |
| Order details: product, amount, date, payment status and order ID | Dodo Payments, after you pay | To give you access you paid for, and for tax and accounting records |
| Billing details you enter at checkout (such as billing address or GSTIN) | Dodo Payments | For invoices and tax records |
| Settings you save: client names, ledger names and mapping rules | You, inside the tools | To pre-fill the tools next time |
| Conversion history: date, bank name, page count and output format | Created when you convert a file | To show your history and count usage |
| Emails you send us | You | To answer you |
| Contact form messages and problem reports: your name, your email (if you give one), what you write, a one-way hash of your IP address to limit spam, and for reports a few technical details (the page, browser, plan, bank name, page and row counts, and the error shown). Never your bank statement, its transactions, names, amounts or file names | You and your browser | To answer you and to find and fix problems |
| Basic technical data: browser type, device type and error logs | Your browser and our hosting provider | To keep the site working and secure |
We do not collect card or UPI details. Dodo Payments handles those directly.
3. How we use it
We use personal data only to provide the service: sign-in, applying limits and plans, processing payments and invoices, answering support requests, keeping the service secure, and meeting legal obligations. We do not sell personal data and we do not use it for advertising.
4. Who we share it with
- Google (Firebase): sign-in, database and hosting. Data is stored on Google Cloud in the United States (Firestore multi-region nam5).
- Google Analytics: visit and usage statistics, as described in section 5.
- Resend: an email service that delivers our emails to you (verification, password reset and welcome emails) and your contact form messages and problem reports to us.
- Dodo Payments: our merchant of record. Dodo sells StatementDock Pro to you, processes your payment, issues the invoice and handles taxes. Dodo’s own privacy policy covers the data you give them at checkout.
- Authorities, when Indian law requires it.
We do not share your data with anyone else.
5. Cookies, local storage and analytics
We use the browser storage that sign-in needs to keep you logged in, and to remember your settings on your device.
Where analytics is switched on, we use Google Analytics to count visits and see which pages and features are used, only if you accept in the cookie banner. If you decline, or do not answer, it does not load and sets no cookie. It receives your IP address, device and browser details and the pages you visit, and never your files or the contents of your bank statements. We do not use advertising cookies, and we don’t use Google Analytics data for ads. You can change your choice at any time with Cookie settings in the page footer, clear your browser storage, or use Google’s opt-out add-on. The browser storage that sign-in needs is strictly necessary and does not need consent.
6. How long we keep it
- Account and settings: until you delete your account.
- Order and invoice records: 8 years, as Indian accounting law requires.
- Support emails, contact form messages and problem reports: up to 2 years after the conversation ends.
- Technical logs: up to 90 days.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you can ask us to the following.
You can ask us to:
- tell you what personal data we hold about you and who we’ve shared it with
- correct or update it
- delete it (we keep order records for as long as the law requires)
- withdraw your consent, which means closing your account
- nominate another person to exercise these rights if you die or can’t act yourself
Email support@statementdock.com from the address on your account. We reply within 30 days. You can also complain to the Data Protection Board of India.
If you are in the European Economic Area, the United Kingdom or Switzerland
We are the controller of your personal data. Under the GDPR (or the UK GDPR) you also have the right to receive your data in a portable format, to object to or ask us to restrict how we use it, and to complain to your local data protection authority. Our legal bases are:
- Contract: your account, plan, usage limits and support, which we need to provide the service you asked for.
- Legal obligation: order and invoice records.
- Legitimate interests: keeping the service secure, preventing spam and fixing problems.
- Consent: Google Analytics, which you can withdraw at any time as described in section 5.
Our servers are in India and our providers (Google, Resend and Dodo Payments) may process data in other countries, including the United States. These transfers are covered by the safeguards those providers publish, such as standard contractual clauses. Email us if you would like a copy of the details. We make no decision about you by automated means that has legal or similarly significant effects.
8. Security
Data is sent over HTTPS. Access to our database is limited by account, and only you can read your own settings and history. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
9. Children
StatementDock is for businesses and professionals. You must be 18 or older to use it. We don’t knowingly collect data from children.
10. Changes
If we change this policy, we’ll update the date at the top. For significant changes, we’ll email account holders before they take effect.
11. Grievance Officer
Agilan Lourdes Paul, Grievance Officer, Orosfort Private Limited
Email: support@statementdock.com
Address: No. 1603, Floor 16, Emerald, Godrej Azure, Padur, Rajiv Gandhi Salai, Chennai, Tamil Nadu 603103
We acknowledge complaints within 48 hours and aim to resolve them within one month.