How We Handle
Your Client's Financial Data

All files are encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Your client's bank statement data is protected from the moment it leaves your browser to the moment it is deleted.

Uploaded bank statement PDFs are automatically and permanently deleted from our servers within 60 minutes of upload. The original PDF is never stored beyond this window. What we retain is only the structured analysis output — the income figures, risk scores, and transaction classifications.

Uploaded bank statement files are processed exclusively on UK servers in the London region (AWS eu-west-2). Structured analysis data (income figures, risk scores, transaction classifications) is stored in encrypted EU servers in Ireland (Supabase eu-west-1), in full compliance with UK GDPR. No data is transferred outside the UK/EU.

AutoConvertPros is operated by Sparkleen Consult Limited (Companies House: 15744371), registered with the UK Information Commissioner's Office under registration number ZC108380. Our ICO registration confirms we have declared our data processing activities to the regulator as required under UK GDPR.

Your client's financial data is never sold, shared with third parties, used for advertising, or used to train machine learning models. The data you upload is used solely to generate your analysis report and then deleted.

Each user can only access their own uploaded statements. Firm plan admins can view statements uploaded by their team members. No cross-account data access is possible. All API access requires authentication.