55 answers, searchable and filterable by topic. If yours isn't here, email us — a real person replies.
The short version of several answers above, in one picture.
Not a promise — a diagram of the actual path each file type takes.
Your browser
Parsed & exported locally
Read by JavaScript running on your machine. It is never uploaded — our servers never see the bytes.
Uploaded (HTTPS)
Held in RAM only
Destroyed instantly
Processed in memory for extraction, then every reference to it is dropped — never written to disk at any point, on either success or failure.
What we actually keep: your email, credit balance, and plan — never account numbers, balances, or the contents of any statement you upload.