Privacy

RowRecon is operated by Shift Warden LLC. Effective date: September 11, 2026. Last updated: September 11, 2026.

Local conversion

Statement conversion, including local OCR when used, runs in your browser. The PDF, OCR text, transactions, balances, names, account numbers, and page images are not uploaded to RowRecon to convert the file or to take payment.

Support

If you submit a support case, we store category, description, optional email, and privacy-safe diagnostics (parser mode, layout id, page-count bucket). We do not attach the statement. Email is used only to respond, not for marketing unless you later opt in through a separate control (none exists today).

Payments

Optional Pro checkout is processed by Stripe. RowRecon stores Stripe customer/session/subscription identifiers, product/price ids, entitlement status, Terms/Privacy/Refund Policy versions accepted, acceptance timestamp, and refund-case metadata. We do not store raw card numbers or statement contents.

Analytics

We may store coarse events (page view, conversion success/failure without amounts, download, support, checkout). An anonymous cookie identifies the browser. We do not record statement contents.

Cookies

Necessary cookies: anonymous analytics id, CSRF, optional Pro entitlement, operator session. No advertising cookies.

Retention and deletion

Support and billing records are kept as long as needed for support, tax, accounting, security, and dispute handling. You can request deletion of eligible personal data via support. We cannot delete a PDF we never received.

Security

We use reasonable safeguards. No security measure is perfect. See /security to report issues.