Privacy policy

The service is run by Samro Studios Inc. (Quebec enterprise number 1182334574), in Laval, Quebec.

The person in charge of the protection of personal information is Sami Bdeira. You can reach them at confidentialite@samrostudios.com.

• The file you drop (CSV, Excel or TXT), for the time it takes to read it and prepare the result.
• At payment, Stripe collects your email, your payment details and, if Stripe needs it to work out taxes, your billing address. We never see your card number. In our Stripe account, we see the amount paid, the date and the receipt email.
• Limited technical logs: the name of a step (for example, file read or payment confirmed), the file size, the number of rows, the chosen format, the file type or Stripe event type, a status, the processing time and, when relevant, an error code, Stripe references (payment, session, event), the service's fixed price or a dispute reason. They hold no file content, no file name, no descriptions, no amounts and no email.
• After a paid download, if you answer our question about your experience: your rating, an optional comment, and, only if you tick the box to show them, a first name or initials and a city, both optional. Never your email, never your file's name.

The service is hosted by Vercel Inc. Like any website, our host may record usual connection data, such as the IP address and the page requested, to keep the service secure.

For a request made to the artificial intelligence service: the task name, the number of calls, the number of tokens used and the duration.

• To read your file, check the totals and prepare the import file you ask for.
• To take your payment and give you a receipt.
• To run the service, protect it and fix errors.

We do not use it for advertising, and we do not sell it.

• The file is read in memory by our own code. It is never written to a disk or to file storage.
• No database keeps your transactions. Once the response is sent to you, the server keeps no copy.
• The full table comes back to you sealed, meaning encrypted (AES-256-GCM). Only our server holds the key. The sealed result expires one hour after reading. If you paid, our server still opens it for 24 more hours, for your downloads.
• Only the first preview rows, the column headers and the totals are sent to you in clear. The blurred rows in the preview are shapes drawn by your browser, not your data.
• The sealed result, your column and format choices, and your file name are kept in your browser tab (session storage), on your device. They disappear when you close the tab.
• When you download, our server opens the sealed result, prepares the requested file and sends it to you. It keeps no copy.

Two optional suggestions use Anthropic's artificial intelligence service (Anthropic, PBC, in the United States): finding your file's columns when we do not recognise them, and proposing an accounting category for each transaction. They happen only if you ask for them on a file. Unless you ask, nothing is sent to Anthropic.

• For the columns, only if you click “Let an AI service suggest the columns” (this button shows only when our reading of the columns is unsure or incomplete): the header row (or, when there is none, the row just above the data), with amounts, dates and runs of 5 digits or more masked, and at most 5 rows of the file, each cell cut to 40 characters with every digit replaced by a symbol. The file name is never sent.
• For the categories, only if you tick “Suggest an accounting category for each transaction” (unticked by default, for each file): each transaction description, once, cut to 120 characters, with its direction (money in or out). Amounts, dates and balances are never sent. Inside a description, amounts, dates and runs of 5 digits or more (an account number, for example) are masked. A description can contain a person's name, for example in an Interac transfer.
• When the box is ticked, only the descriptions of the preview rows are sent before payment. When you download the clean CSV, all the descriptions of the file are. The other formats carry no categories and send nothing.

The answers are suggestions. Amounts, balances and totals are always computed and checked by our code. A column suggestion is kept only when our checks show it reads your file better, and you can always correct it.

Every request asks Anthropic to process the data in the United States (inference location “us”), so outside Quebec. Under its commercial terms, Anthropic does not use this data to train its models. According to its privacy center, it deletes the data from its systems within 30 days. It may keep it longer if it is flagged for a usage policy violation (up to 2 years) or if the law requires it.

We keep neither the data sent nor the answers. Our logs hold none of it: only the task name, the number of calls, the number of tokens used, the duration and, when relevant, an error code.

If the service does not answer, or if the clean CSV with categories was already prepared 3 times for this payment, your file is delivered without categories, at the same price.

You can use the service without these suggestions: reading, checks and every format work without them.

Our site sets no cookies, neither for advertising nor for audience measurement. We use no tracking tools.

When you pay, you are on Stripe's payment page. Stripe uses its own cookies there, for example to prevent fraud. They are covered by Stripe's privacy policy.

After a paid download, we ask you once how it went. Answering is optional. Your answer changes nothing about your right to a refund.

What we keep: your rating, your comment if you write one, your answer when we ask whether we may show your review, with the date and time of that answer, the page language and the currency paid. If you tick the box, we also keep the first name (or initials) and the city you give.

Your feedback is linked to your payment only by a one way, salted fingerprint of its reference, so that there is only one feedback per payment. We never keep your email, your file or your connection address with your feedback.

Your comment, first name and city are shown only if you ticked the box, and only after we have read them. They appear in the Reviews section of this site's home page.

Your rating counts in the average shown, whether your review is published or not.

To remove your feedback, write to confidentialite@samrostudios.com. We erase your comment, first name and city, and the review is no longer shown. Your rating stays in the average, with nothing that identifies you.

We do not sell, rent or trade any information.

Stripe processes payments. Besides the payment itself, Stripe only receives the row count of the file, a technical code that cannot be used to recover its content, a marker showing the payment comes from our service, and the page language. Stripe may process payment information outside Quebec.

Vercel Inc. hosts the service and, like any host, may process connection data outside Quebec.

Neon hosts our small database in the United States (Virginia), so outside Quebec. It only keeps the counters that limit abuse, Stripe payment references and feedback. It never receives the content or the name of your file, or your email.

Only if you ask for it on a file, Anthropic receives the parts of the file described in the artificial intelligence section, only to produce the suggestions.

• Your file: for the time of the reading, then nothing is kept.
• The sealed result: it expires one hour after reading (25 hours if you paid for it) and only exists in your browser.
• Payment information: it stays in our Stripe account for as long as tax law requires.
• The Stripe payment references we keep so that the same payment is never refunded or handled twice: 400 days at most, then they are deleted automatically.
• Your feedback: for as long as the service exists, or until you ask us to remove it.

To limit abuse of the free reading and preview, of payment, of downloads and of our feedback form, we keep a one way, salted fingerprint of your connection address and a counter, never the address itself. It expires at the end of the limit window (one hour, or one day for the daily limit on free previews, so one day at most) and is then deleted automatically. This, and Stripe payment references, are kept in a database hosted by Neon in the United States (Virginia).

The parts of the file sent to Anthropic for the suggestions are deleted by Anthropic within 30 days, except in the cases listed in the artificial intelligence section.

When you ask for a suggestion, the same fingerprint of your address, and a one way, salted fingerprint of the file you are working on, count your requests for one hour at most. After a payment, the number of clean CSVs with categories prepared for that payment is counted with a one way, salted fingerprint of its reference, for 25 hours at most.

You can ask to access the information we hold about you, to correct it, or to withdraw your consent. You can also ask how we use it.

If you left a first name or initials and a city with a review shown on the site, you can ask to have it removed at any time, at the same address.

Write to confidentialite@samrostudios.com. We answer in writing within 30 days of receiving the request.

If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec.

If you live elsewhere in Canada, you can also contact the Office of the Privacy Commissioner of Canada.

If an incident creates a risk of serious harm, we notify the people concerned and the Commission d'accès à l'information, as the law requires.

If this policy changes, the new version is posted on this page with its date.