RowCloverRowClover privacy
Effective 19 October 2026. Yolleg Ltd controls account and billing data; its registered address is in the terms. Contact [email protected].
Information and purposes
The converter processes selected PDFs and transaction rows in browser memory, without uploading them or using cloud AI. Chosen coded mapping profile names, settings, revisions and account details are sent to our server. Do not place bank/customer identities or transaction content in profile codes or business settings. We also process account emails, staff roles/invitations, server attribution, subscription references, contractual consent, support and declaration records. The organisation determines purposes and lawful basis of its workspace data. We provide the requested service and support data enquiries. Account/billing processing relies on contract, legal obligations and security-related legitimate interests. No advertising tracking, third-party page fonts, sale of data, cloud AI or automated high-impact decisions. Essential secure HttpOnly SameSite session cookies last up to 7 days.
Shared access and security
Email accounts use random one-use sign-in links lasting 15 minutes and matching-email confirmation. Sessions last up to 7 days. Sign out all devices revokes other sessions. Recovery requires access to your email. Pro includes the owner and up to four named staff. Editors add permitted records; viewers read/export permitted records. All authorised staff see the whole selected workspace; no per-record access boundaries. Staff access needs the owner’s active Pro subscription. The owner controls settings, billing, staff access and erasure. Surface reviews, price reviews and retained print runs are owner-only where provided. Invitations expire after 7 days; no invitation email is sent. Revocation blocks subsequent server access, not downloaded copies. New entries are stamped with the submitting account and server-received time; imports do not prove historical authenticity. Records are private to authorised workspace members, without public publishing. Use coded references and minimise personal data. Never upload credentials, card details or unnecessary sensitive records. Saved-data encryption is not end to end; authorised support can decrypt it. Protect your email and device. Local PDFs can contain sensitive information; use a trusted device, clear the session and manage downloaded copies.
Providers and international processing
Hosting.com hosts saved data, Stripe handles subscriptions and Twilio SendGrid sends requested sign-in, purchase and declaration messages. No operational reminder or staff-invitation email. Providers may process data in the US and other countries. Published transfer documents describe Data Privacy Framework/UK-extension and contractual clauses with UK addenda where applicable; they do not confirm every account-specific arrangement. Account-specific support/backup geography, complete processing agreements and deletion schedules remain unconfirmed. We do not promise UK-only processing. We do not receive full card numbers.
Retention and your rights
Bank PDFs, extracted transactions, balances and local account codes remain in browser memory. Reloading or Clear removes that local session; downloaded files remain on your device. Coded mapping profiles and versions are saved on our server. Server PDF/photo upload is disabled for this app. Server workspace history remains until whole-workspace erasure. Accounts/memberships remain until support processes a deletion request. Billing, consent and complaints may be retained for 6 years where legally needed. Used/expired sign-in challenges and authentication mail are pruned; staff invitations last 7 days. Logs may include IP, route, time and errors; rate counters use keyed bounded identifiers. Provider backups may remain after live erasure; exact retention/deletion schedules are unconfirmed. Request access, correction, deletion, restriction or objection at [email protected]. Export free JSON and download originals separately, where provided, for portability. Identify your account without sending sign-in tokens or card details. You may complain to the UK ICO or your local authority. Cancellation does not erase records.
Provider documents
https://stripe.com/legal/dta https://www.twilio.com/en-us/legal/data-protection-addendum https://terms.hosting.com/data-privacy-framework Twilio Binding Corporate Rules do not cover SendGrid. Published mechanisms do not confirm all account-specific arrangements.