Privacy policy

Last updated 2026-10-06

RowBalance is operated by Forclev LLC ("we"). This policy explains what data RowBalance handles.

Your statements stay on your device

When you convert a file, it is read and processed by JavaScript running in your browser. The file, its transactions, balances and account details are not uploaded to us or to anyone else. The converter loads the open-source PDF.js library from cdnjs (Cloudflare); that request contains no statement data.

What we do store

• License records (paid plans): a random license key, your Stripe customer ID, plan, subscription status, billing period and the number of pages converted in the current period. We do not record file names or contents.
• Payments are processed by Stripe, which collects your email address and payment details under Stripe's privacy policy. We never see full card numbers.
• Free-plan page counter: to enforce the free daily allowance, your browser tells our server how many pages a file has (a number, never the file or its contents). We store that count against a salted one-way hash of your IP address for the current UTC day and delete older days. The hash cannot be turned back into your IP address. Cloudflare Turnstile checks that a request comes from a real browser; it sees your IP address and browser signals under Cloudflare's privacy policy.
• Server logs: our host, Cloudflare, processes IP addresses and request metadata to deliver and protect the site.

Cookies and local storage

We set one essential cookie, rb_license, after you buy a plan or enter a license key, so the site knows your plan. The free plan's daily page count is also kept in your browser's local storage as a display hint. We use no cookies for advertising or analytics.

Anonymous usage statistics

To learn which pages help people and where the converter gets stuck, we count what happens on the site. We do this without cookies and without storing anything in your browser, so there is nothing to accept or decline.

• What we count: pages viewed; the site or campaign link (utm_ tags) that brought you; how far down a page you scrolled (25, 50, 75, 100%) and which parts of it came into view; clicks on our menus, links and buttons; FAQ questions opened; converter steps (a file was chosen, read or not read, the balance check result, an export format chosen, the free limit reached); checkout steps (plan chosen, the bot check passed or failed, a completed purchase and its plan); and JavaScript error names with the script file and line number.
• Details attached: the file type (for example PDF or CSV), a page-count range (for example "2-5 pages"), the statement currency and account type (for example "USD checking"), and the reason a file could not be read (for example "scanned PDF"). Plus your country and device type (desktop, mobile or tablet), worked out from the request.
• Never recorded: file names, file contents, transactions, amounts, balances, account numbers, your IP address or anything you type.
• Daily visitor code: to count visitors and follow a visit from page to page, our server combines your IP address and browser name with a random value that changes every day, and keeps only a scrambled code made from them. The daily value is deleted the next day, so the code cannot be turned back into your IP address or linked to your visits on other days, not even by us.
• Cloudflare Web Analytics also counts page views and page speed without cookies, under Cloudflare's privacy policy.

These statistics are stored with Cloudflare and kept for about three months. They are used only to improve RowBalance and are never sold or used for advertising.

Sharing

We do not sell personal data. We share data only with the processors above (Stripe, Cloudflare) to run the service, or when the law requires it.

Retention and your rights

License records are kept while your plan is active and for as long as tax and accounting law requires afterwards. You can ask for access to, or deletion of, your data by emailing support@rowbalance.com. Residents of the EU, UK and California have the rights given by the GDPR, UK GDPR and CCPA.

Changes

We will post changes to this policy on this page and update the date above.