Your clients trusted you with their statements. We keep it that way.

1. Originals are deleted on a schedule you control

By default, every uploaded file — statement PDFs, receipt photos, and the intermediate OCR output — is permanently deleted 90 days after processing. A daily job enforces this; deletion is not "archived somewhere," it's gone from storage.

You can change the retention window in settings, from 0 days (the original is deleted immediately after processing completes) up to 365 days if your engagement letters require longer access. The extracted transaction data — dates, descriptions, amounts, categories — remains in your account so your books and exports keep working, until you delete it.

2. Your documents are never used to train AI models

Not by us, and not by anyone else. We do not train models on customer documents, and we do not permit the AI providers that power our extraction pipeline to retain or train on the content we send them. Our internal logs record token counts and timing for cost monitoring — never the content of your documents.

3. We store the minimum the job requires

• Account numbers: last four digits only. Our extraction is instructed to output only the last four digits, and a code-level safeguard truncates anything longer before it can reach the database. Full account numbers are never stored.
• Files live in private storage. Nothing is publicly addressable. Every download — including your own — goes through a signed link that expires after 15 minutes.
• Strict tenant isolation. Every query in the system is scoped to your firm. Access controls are covered by automated tests that verify one firm can never read another firm's data.

4. Delete everything, any time

You can delete any document, any client, or your entire account whenever you choose. Deleting your account is a hard delete: all extracted data, all category memory, all remaining files in storage — removed, not flagged-hidden. If you'd rather we do it, email 909422284osd@gmail.com from your account address and we'll confirm completion.

5. Where your data lives

ReconLens runs on infrastructure hosted in the EU and US. Data is encrypted in transit (TLS) and at rest. We use a small number of vetted subprocessors — cloud hosting, object storage, AI extraction providers, email, and payments — each bound by data processing terms consistent with this promise.

The formal bits

The promise above is the plain-language version. For completeness — and for anyone reviewing us formally — here is the same information stated as a policy.

What data we collect

• Account data: your email address, a hashed password, and your firm's name and plan details.
• Documents you upload: statement PDFs and receipt images, held only for your configured retention period.
• Extracted transaction data: dates, descriptions, amounts, categories, and the last four digits of account numbers — kept in your account until you delete it.
• Usage metrics: pages processed, feature usage, and per-request token counts and timing for quota and cost monitoring. Metric logs never contain document content.

Processors we use

• Cloudflare R2 — private object storage for uploaded files and OCR intermediates.
• AI/LLM providers — used to extract and categorize document content. Documents are processed by these providers but are never retained by them for, or used in, model training.
• Paddle — our payments provider and Merchant of Record. Payment card details go directly to Paddle; we never see or store full card numbers.
• Postmark — transactional email (verification, alerts) and inbound per-client email addresses.

Retention and deletion

Original files and OCR intermediates are deleted 90 days after processing by default; you can configure this from 0 days (deleted immediately after processing) up to 365 days. Extracted transaction data is retained until you delete the document, client, or account. Deleting your account permanently removes all associated data and files, and you can request deletion of anything at any time.

Data requests

For access, correction, deletion, or any other data request, email 909422284osd@gmail.com from your account address. We confirm completion of every deletion request.

This page is our product promise, written for the bookkeepers who use ReconLens. Questions about anything here — or requests we haven't anticipated — go to 909422284osd@gmail.com; a human reads every message.