Privacy Policy
What happens to your bank statement, what we keep, and what we don't.
Last updated: 11 August 2026
Who we are
statementconverter.my is an online tool operated as a sole proprietorship based in Malaysia. For anything in this policy, write to vinustore.technology@gmail.com.
This policy covers statementconverter.my and its subdomains, including newsroom.statementconverter.my, pdf.statementconverter.my, calculator.statementconverter.my, carcost.statementconverter.my and travelcost.statementconverter.my.
Bank statements you upload
Your statement is processed in memory and automatically deleted within 15 minutes. We do not store the file or the transaction data it contains, and we do not use it to train any model.
One exception: if your bank's layout is not recognised yet, the file may be forwarded securely to our team so support for that format can be added. If you would rather we did not, email us and we will delete it on request.
We do not sell, rent or share your statement data with anyone.
Account data we do keep
When you sign in with Google or email we store your email address, your remaining conversion credits and basic usage counts. That is what the service needs to work — nothing from inside your statements is kept alongside it.
This account data is held in Supabase (Postgres), hosted outside Malaysia. Deleting your account deletes it.
Payments
Payments are processed by HitPay (FPX, DuitNow, cards and e-wallets). Card and banking details are entered on HitPay's systems — we never see or store them. We receive only the payment status and reference so we can credit your account.
Cookies, analytics and advertising
We use a sign-in cookie to keep you logged in, and we count page views to see which pages are used. That counting is aggregate — it is not tied to your identity.
Google AdSense serves advertising on our Newsroom section. Google and its partners may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising at google.com/settings/ads, and manage cookies from third-party vendors at aboutads.info.
Visitors in the EEA, the UK and Switzerland are shown a consent message before any advertising cookie is set, and can decline. Declining does not affect the converter.
Your rights under the PDPA
Under Malaysia's Personal Data Protection Act 2010 you may ask us what personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw consent to processing.
Email vinustore.technology@gmail.com from the address on your account and we will respond within 21 days. There is no charge.
Security and retention
Traffic is encrypted in transit (HTTPS). Uploads live only in memory during conversion and are discarded within 15 minutes. Account data is kept while your account exists.
No system is perfect. If a breach affects your personal data, we will tell affected users by email.
Children
The service is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes to this policy
We will update this page when the service changes and move the date at the top. Material changes will also be announced on the site.