TRUST CENTER

Security and privacy

The financial document, the account and the site analytics are kept apart. Below is exactly what stays in your browser and what the server ever learns.

What runs in your browser

Reading PDF and banking formats
Extracting text and transactions
Checking balances and exports
Creating exports and a ZIP only for multiple files

What is not sent to the server

Files, file names or extracted text
Transactions, amounts, balances or counterparties
Account numbers, IBAN, BIC, symbols or export content

Services and their roles

VýpisFlow / D1

Plan, usage, subscription state and safe technical identifiers. No statement contents.

Clerk

Authentication, user account and session security.

Stripe

Payment, billing details, tax and subscription state.

Analytics

Only after consent and only allowlisted product events without financial data.

Local OCR

OCR starts only when you choose it. Models download to the device and processing can take longer.

Retention

Statements are not stored on the server. Local drafts and profiles remain only in your browser and are subject to browser storage.

Remote support files

Normal conversion never uploads statements. You may voluntarily attach a PDF to a bank support request. Only after you select the consent checkbox and submit the form is the attachment sent to our server and support email service. Prefer a synthetic sample or remove sensitive information first.

Supported environment

Use a current Chrome, Edge, Firefox or Safari with JavaScript, WebAssembly and local storage enabled.

Report a security issue

Email info@vypisflow.cz. Do not send a real statement, credentials or payment data without prior agreement.

Local-processing limitations

- Large files can use significant device memory.
- Scans require explicitly started local OCR.
- A changed bank layout may require a parser update.

Status and version

Application version 0.0.87

This page is not continuous monitoring. It distinguishes local features from external services checked when used.

Website: Availability of this static page confirms the web layer.
Account API: Availability is checked when plan usage is loaded or consumed.
Converter: Parsing and export run locally in the browser.
Authentication: Availability is checked when Clerk opens.
Payments: Availability is checked when Stripe Checkout opens.

Open the statement converter VýpisFlow