Terms & Conditions.

StatementKeep helps you collect your own financial statements in one place. You securely store the login credentials for your financial accounts — banks, credit cards, e-commerce, and buy-now-pay-later providers — and we automatically log in for you, find your monthly statements for the date range you choose, and download them as PDFs. We then convert those PDFs into CSV files you can import into QuickBooks. It replaces hours of logging into each portal by hand.

To do this, your credentials are stored in encrypted form. Because we have to sign in on your behalf, that encryption is reversible — we decrypt a credential only at the moment we use it to log in for you. How we handle your data is described in our Privacy Policy, which is part of these terms.

You must be at least 18 years old to use the service.

Keep your StatementKeep password and account details confidential. You're responsible for everything that happens under your account, so tell us right away at support@statementkeep.com if you think someone else has access.

When you add credentials for a financial account, you're telling us that the account is yours (or that you're allowed to access it), and you're authorizing us to sign in on your behalf for the sole purpose of finding, downloading, converting, and storing your statements. You can remove a set of credentials at any time to withdraw that permission. The statements and data we retrieve are yours — we use them only to run the service for you, and we never sell them.

Please use the service only for lawful purposes and only to retrieve statements from accounts you're entitled to access. Don't try to break, overload, reverse-engineer, or gain unauthorized access to the service; don't use it to access accounts that aren't yours; and don't use it to build a competing product. We may suspend or remove access if the service is being misused.

To learn how to sign in to an account for you, we ask you to sign in to it yourself, twice, in a secure browser, and we record each sign-in. The sign-in automation we build from it is code for that institution, so it can also sign in for other customers who use the same institution. Your recordings themselves are never shown to another customer.

When you agree to record a sign-in, you're telling us that the account is yours (or that you're allowed to access it), and you're authorizing us to save the recording, masked as our Privacy Policy describes, and to have it processed by our AI providers to build and check that sign-in. Recordings are processed by our AI providers, with personal information masked first: what you typed is never recorded, and text boxes and long numbers are blacked out before a recording is saved. Only the masked version of a recording is ever sent. A picture can still show other things on the screen, such as your name on a welcome page.

We keep and delete recordings as follows. We keep the current recording for each account until you finish recording that account again, remove the account, or delete your StatementKeep account. When you finish recording an account again, we delete the recording it replaces 30 days later. A recording you start but do not finish is kept until you remove the account or delete your StatementKeep account. When you delete your StatementKeep account, we delete all of your recordings with it and destroy the encryption key that protected them. We keep the access log for as long as you have your account, plus 1 year after you delete it, and then delete it. The log says who read a recording and when; it holds no pictures and nothing you typed.

Some financial institutions will only accept logins that come from an ordinary home internet connection, and refuse connections from data centers. To reach those institutions, StatementKeep offers an optional mobile app we call the Phone helper. When you turn it on, it routes your own statement-fetch traffic through your own phone's internet connection, so the login looks like it's coming from your home network — which it is.

A few important points about how it works:

• Your traffic only. Your phone only ever carries traffic for your own accounts. It never carries another customer's traffic, and another customer's phone never carries yours.
• Your phone can't read it. The connection to your financial institution is encrypted end to end. Your phone simply passes that encrypted traffic along — it never decrypts it and can't see your credentials or statements.
• It's opt-in. The Phone helper is off unless you choose to enable it, and you can turn it off at any time.
• Some institutions require it. For institutions that can only be reached this way, you'll need to install the mobile app and pass a one-time connectivity test before we can fetch those accounts for you.

When you first open the mobile app, it shows a separate in-app agreement covering its use, and the data it handles is described in our Privacy Policy.

We work hard to make the service reliable, but we provide it "as is" and "as available," without warranties of any kind. We can't promise the service will always be uninterrupted, error-free, or secure.

In particular: we retrieve documents from financial portals we don't control. Those portals can change, add verification steps, or block automated access at any time, so a retrieval may fail or may need your help (for example, relaying a verification code). We don't guarantee that any particular institution, document, or statement period can be retrieved, or that a PDF-to-CSV conversion is complete and error-free — always review exported data before relying on it. The service is a document-retrieval and archiving tool only; nothing here is accounting, tax, legal, or financial advice.

To the maximum extent allowed by law, StatementKeep won't be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits or lost data, arising from your use of (or inability to use) the service. Where liability can't be excluded, our total liability to you is limited to the amount you paid us for the service in the 12 months before the claim. Some places don't allow these limits, so they may not fully apply to you.

You can stop using the service and delete your account at any time. We may suspend or end your access if you break these terms or misuse the service. When your account is closed, your stored credentials and sign-in recordings are deleted, and your data is handled as described in our Privacy Policy.

We may update these terms from time to time. If we make a significant change, we'll let you know — for example by email or a notice on the site. If you keep using the service after a change takes effect, that means you accept the updated terms.

These terms are governed by the laws of [governing-law state], without regard to its conflict-of-laws rules. The service is offered by [StatementKeep legal entity].

Questions about these terms? Reach us at support@statementkeep.com or 1-628-888-6331.