1. Scope and accountability
This policy applies to the Bank Statement Converter at bankstatementconverter.sraccountax.ca, operated by SR Accountax and displayed online as “SR AccounTax.” The mailing address is 41 Dufay Road, Brampton, Ontario L7A 4A2, Canada. SR Accountax is accountable for personal information under applicable Canadian privacy law. Contact the Privacy Officer by mail at that address or by email at enquiry@sraccountax.ca.
2. What stays in your browser
The selected PDF, PDF password, extracted statement text, transaction table, edits and exported files are processed on the device in the browser. They are not intentionally uploaded to or retained by SR AccounTax. PDF parsing, OCR and export libraries are served from the converter domain. Optional preferences saved by a Pro user remain in that browser’s local storage and exclude bank and account identifiers.
3. Information sent to the service
Account records may include name, email address, password hash, email-verification status, optional phone number, Google sign-in identifier and login/security events. Usage controls receive an account identifier, access type, page count, completion status, and keyed one-way hashes of a network address, device token and PDF fingerprint. They do not receive the PDF, transaction descriptions, balances, bank identifier or account identifier entered in the converter.
Normal hosting logs may record IP address, user agent, requested URL, time and technical errors. Stripe processes payments; SR AccounTax stores related customer, checkout, invoice, subscription and status identifiers, but not complete payment-card numbers. Google sign-in and Cloudflare Turnstile process information only when those optional or security features are used.
4. Purposes and consent
Information is used to create and secure accounts, verify email, provide access, enforce allowances, process and reconcile payments, prevent abuse, respond to support and privacy requests, maintain required records and meet legal obligations. Consent is requested when an account is created and before a purchase. SR AccounTax does not sell personal information.
5. Advertising and Meta
The converter, sign-in, account and checkout-return pages do not contain a Meta Pixel, Conversions API event, advertising cookie or behavioural analytics tag. SR AccounTax does not send statement, account, transaction, billing or converter-use data to Meta. If you click a Meta advertisement, Meta may process the ad interaction under its own terms before you arrive here. Campaign parameters in a landing-page URL may appear in ordinary server logs, but the converter does not combine them with statement contents.
6. Cookies and device storage
The service uses a necessary secure session cookie for authentication and CSRF protection and a signed device cookie for abuse controls. Optional converter preferences use local storage only after the user chooses “Save settings.” Google, Stripe and Cloudflare may use their own necessary cookies when their services are used. There are no optional advertising cookies on the converter.
7. Service providers and cross-border processing
Website/email hosting, Stripe, Google and Cloudflare may process information in Canada, the United States or other jurisdictions and may be subject to local lawful-access rules. SR AccounTax remains responsible for information under its control and limits disclosures to the purposes above.
8. Retention
- PDF contents, passwords and extracted transactions: not intentionally received or retained by SR AccounTax.
- Incomplete verification and password-reset tokens: kept only until expiry or replacement.
- Free-use fingerprints and related abuse records: normally at least 90 days, then only as reasonably needed for security, disputes or legal obligations.
- Account, subscription, payment and security records: retained while the account is active and afterwards for applicable tax, accounting, fraud-prevention, contractual and legal periods.
- Server logs: retained according to the hosting/security schedule and minimized where operationally feasible.
9. Safeguards and incidents
Safeguards include TLS, secure HTTP-only cookies, CSRF protection, password hashing, rate limits, access controls, restrictive browser security headers and local statement processing. No internet service can guarantee absolute security. Report a suspected incident promptly to the Privacy Officer. SR AccounTax will assess, record, notify and report qualifying breaches as applicable law requires.
10. Access, correction, deletion and complaints
You may request access to or correction of your personal information, withdraw consent where applicable, or request account deletion by emailing the Privacy Officer from the account email. Identity verification may be required. Information may be retained where required for tax, payment, security, fraud, dispute or legal purposes. If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada.
11. Children and changes
The service is for people aged 18 or older and is not directed to children. Material policy changes will be posted here with a new effective date and, where appropriate, brought to account holders’ attention.