Privacy Policy

Last updated: September 29, 2026

EasyEntry LLC, a New York limited liability company ("EasyEntry", "we", "us", or "our") runs EasyEntry: the website at easyentry.ai and the web app that turns bank and credit-card statements into a profit-and-loss statement (together, the "Service"). This Privacy Policy explains what information the Service collects, where it goes, how long we keep it, and the choices you have.

If you have questions after reading this, email us at help@easyentry.ai.

1. Information We Collect

Information you give us

• Your email address. You sign in with a link we email to you; there is no password. We also keep a normalized form of your address (lower-case and, for Gmail, without dots or a "+tag") so that one mailbox gets one free trial. We create an account record for an address (the address, its normalized form and the date) the first time a sign-in link is requested for it or a plan is chosen with it on our Pricing page, even if the link is never used or the checkout is never finished. If someone did that with your address and it wasn't you, email help@easyentry.ai from that address and we will delete the record.
• The statements you upload. CSV or text exports, PDF statements, and photos or screenshots (JPG or PNG) of bank or credit-card statements, up to 10 MB per file. A statement usually shows your name and address, account details and balances, and every transaction's date, description and amount. Descriptions often name the people and businesses you paid or were paid by.
• Business details you choose to add. An optional business name and up to five owner names, which help the AI tell owner draws and transfers apart from business income and expenses.
• Your answers to the AI's questions. When the AI isn't sure how to categorize a transaction it may ask you about it. Your answer (up to 500 characters) is sent to the AI together with that transaction.
• Your edits. Categories you change and the names you give your saved P&Ls.
• Messages to us. The name, email address, company, expected volume and message you send through the site's contact forms, and any email you send us.
• Payment details, which go to Stripe, not to us. When you subscribe, you enter your payment details on Stripe's checkout page. From Stripe we keep your Stripe customer and subscription IDs, your plan, whether you pay monthly or yearly, your subscription status, and your billing-period dates. We never see your full card number or security code. Stripe's notices to us about your subscription can include billing details such as your name and billing address; we don't use or store those details.

Information created when you use the Service

• Your saved P&Ls. Each P&L you generate is saved to your account ("My P&Ls"). A saved P&L contains every transaction's date, description (up to 500 characters), amount and category, the AI's confidence score and its short reason for the category (up to 300 characters); for a transaction the AI asked you about that you haven't answered yet, its question (up to 500 characters), and how many such transactions the P&L has and their total amount; the P&L's lines and totals; the period it covers; its name; the result of the statement check and any warnings; the business and owner names you gave; and a fingerprint (a one-way hash) of its transactions, so that running the same statement again replaces the earlier P&L instead of duplicating it. We don't save the file you uploaded, and we don't save your answers to the AI's questions as such (the AI's short reason may reflect your answer). If you upload a file but never generate a P&L from it, none of its transactions are saved.
• Plan and usage records. Your plan, page allowance and pages used; your billing-period dates; the plan state your account had when a subscription started or ended; a record of each file upload (its time and billing period — not the file or its name); records of runs the AI failed to complete; and how many free re-runs a saved P&L has used.
• Sign-in records. For each sign-in link we send: a one-way hash of the link's secret (never the secret itself), when it expires, and whether it has been used.
• Payment notifications. The ID, type and arrival time of each notification Stripe sends us, so that none is processed twice.
• Technical data. We use your IP address, in memory only, to limit how often sign-in links, checkouts and contact messages can be requested from one address; it isn't written to our database. Our hosting providers see IP addresses, browser details and request data as part of serving the Service. Our server logs record, among other things, the subjects of the emails we send and their recipients' addresses in shortened form (such as j***@example.com), account and subscription IDs, an outline of how a PDF or photo statement was read (whether it is a bank or card statement, how many of its printed totals could be read, and how many transactions were found, but not its balances, totals or transactions), and details of errors, including the name of a file that failed to process.

Cookies and browser storage

• One cookie. We set a single cookie, easyentry_session, to keep you signed in. Page scripts can't read it, it is only sent over secure connections, and it lasts 30 days or until you sign out on that device.
• Local storage. The app stores two things in your browser: your language choice, and the business and owner names you last entered (so you don't have to retype them). They stay in your browser; your language choice is also sent with each request so that messages from our server come back in your language, and when you subscribe it is passed to Stripe with your checkout so that the sign-in email and the receipt we send after payment are in your language. You can clear them in your browser's settings.
• No analytics or advertising trackers. We don't use analytics, advertising or social-media cookies or trackers. The app's pages load fonts from Google Fonts, so Google receives your IP address and browser details when those pages load. Stripe's checkout and billing pages are run by Stripe and set their own cookies under Stripe's privacy policy.

2. How We Use Your Information

We use the information above to:

• provide the Service — read your statements, check them against their printed totals, categorize the transactions, and build, save, show and export your P&Ls;
• sign you in, run your account, and apply your plan's page allowance, the usage limits, and the one-free-trial-per-mailbox rule;
• process subscription payments and send receipts;
• send service emails (sign-in links and receipts) and answer your messages — we don't send marketing emails;
• keep the Service secure, prevent and investigate abuse, diagnose errors, and keep backups;
• comply with legal obligations.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

We do not use your statements or P&Ls to train AI models. We don't look at an individual customer's statements or saved P&Ls except when you ask us to (for example, for support), to investigate abuse or a security problem, or when the law requires it.

3. Where Your Statements Go: AI Processing

EasyEntry uses Anthropic's Claude AI models, through Anthropic's API, to read statements and to categorize transactions. Here is exactly what is sent:

• CSV and text files are read on our own server, without AI; their transactions are still sent to Anthropic for categorization (below).
• PDF statements: when the PDF contains text, our server extracts the text and sends it to Anthropic; when it doesn't (for example, a scanned statement), or when no transactions can be read from its text, the whole PDF is sent (up to 100 pages).
• Photos and screenshots are sent to Anthropic whole.
• Categorization: each time you generate a P&L, every transaction's date, description (its first 500 characters) and amount is sent to Anthropic, together with the business and owner names you gave and your answers to the AI's questions.

Anthropic processes this content to return the results to us. Anthropic's published policies, as of September 2026, say the following. Its Commercial Terms of Service (effective June 17, 2025) state that Anthropic may not train models on customer content from its services. Its API data-retention policy (updated July 1, 2026) says that API inputs and outputs are automatically deleted within 30 days, except content flagged for violating its Usage Policy, which may be kept for up to 2 years; content Anthropic must keep where required by law; and content covered by a separate agreement. These are Anthropic's own policies and may change; the current versions are on anthropic.com.

4. Who We Share Information With

We share information only with the service providers below, and only what each needs to do its job:

Email you send to help@easyentry.ai, including the contact-form messages Resend delivers there, is received and kept by the provider that hosts that mailbox.

Each of these providers has its own privacy practices, which you can review on their websites. Railway and Vercel, which host the Service, are based in the United States. Our providers may process information in the United States and other countries where they operate.

We may also disclose information if we are legally required to do so — for example, in response to a subpoena or court order — or if we believe disclosure is necessary to protect the rights, property, or safety of EasyEntry, our users, or others.

If EasyEntry is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will notify you by email if that happens.

5. How Long We Keep Your Information

• Uploaded files: not kept. A file is held in our server's memory while it is processed and is never written to our disk or database. (For what Anthropic keeps, see section 3.)
• Saved P&Ls: kept until you delete them in My P&Ls or your account is deleted (see "Closed and inactive accounts" below, and section 7). Canceling a paid plan doesn't delete them — you can still sign in to view, export and delete them.
• Account, plan and usage records, and payment notifications: kept while your account is open.
• Closed and inactive accounts: we keep an account's information, including its saved P&Ls, for up to three (3) years after the account is closed or, if it stays open without an active paid plan, after it was last used, and then delete it. An account with an active paid plan is in use for as long as the plan is active. You can ask us to delete it sooner (section 7).
• Sign-in links: expire 15 minutes after they are sent (24 hours for the link sent after checkout). Used and expired links are deleted nightly.
• Records of failed AI runs: on paid plans, records older than 24 hours are removed as new ones are recorded; on the free plan they are kept, to apply the free trial's limit.
• Backups: once a day we take a compressed snapshot of our database and keep it on our server's own storage, with the same hosting provider (Railway). We keep the seven most recent snapshots, so each one is normally deleted after seven days; old snapshots are deleted only when a new one is taken, so a night without a snapshot (for example, while the server is restarting) keeps them a day longer. A snapshot is a copy of the information in our database when it was taken, and nothing else: information deleted before then is not in it.
• Deleted information: when you delete a saved P&L, or a new run or your own edits replace one, the deleted P&L (or the earlier version) disappears from your account and is erased from our database at once: its contents are overwritten in our database file, not just hidden. Only snapshots taken before that still hold them, and those are deleted as they rotate out, so the deleted P&L is normally gone from every snapshot within seven days (previous item).
• Server logs: kept for up to ninety (90) days. Resend keeps its own records of the emails it delivers, under its retention settings.
• Support correspondence: kept for up to three (3) years.
• Payment records: Stripe keeps its own records of your payments under its policies and legal obligations.

6. How We Protect Your Information

The safeguards we use include:

• encrypted connections (HTTPS) between your browser and the Service;
• sign-in without passwords: each sign-in link is random, works once, expires after 15 minutes (24 hours after checkout), is stored only as a one-way hash, and is used only when you press "Sign in" on the page it opens, so email security scanners that open links can't use it up;
• a signed session cookie that page scripts can't read and that is only sent over secure connections;
• uploaded files held in memory only and never written to disk by our application;
• each account can read only its own saved P&Ls;
• information you delete is overwritten in our database, not just hidden, and each backup is a compacted copy that holds only what the database held when it was taken;
• limits on how often sign-in links, checkouts, contact messages and uploads can be requested;
• card details handled only by Stripe;
• access controls limiting production systems to authorized personnel.

No security measure is perfect. While we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a data breach affecting your information, we will notify you and regulators as required by applicable law.

7. Your Rights and Choices

• See and download your P&Ls. Sign in and open My P&Ls to view any saved P&L and download it (Excel, CSV, QuickBooks formats, or print to PDF). For a copy of the other information we hold about you, email us.
• Correct. You can change categories and P&L names yourself. To change the email address on your account, email us.
• Delete P&Ls. Delete any saved P&L in My P&Ls. It is erased from our database at once; the backup snapshots taken before you deleted it keep it until they are deleted, normally within seven days (section 5, "Deleted information" and "Backups").
• Delete your account. Email help@easyentry.ai from the address on your account. Cancel any paid plan first under Manage billing, or ask us to cancel it. Once we have confirmed the request, we will delete your account, saved P&Ls and usage records from our database. As with a deleted P&L, they are erased from our database file, not just hidden, and remain only in backup snapshots taken before the deletion, until those snapshots are deleted, normally within seven days (section 5). We may keep information the law requires us to keep, and Stripe keeps its own payment records.
• Browser storage. Clear the language choice and saved business names in your browser's settings.
• Emails. We only send service emails (sign-in links and receipts), which are part of the Service.

We act on requests sent from the email address on the account, and may ask you to confirm a request before acting on it. We will respond within the timeframes required by applicable law.

For California residents

If you live in California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect, the right to delete, the right to correct, and the right not to be discriminated against for exercising your rights. We do not sell or share personal information as the CCPA defines those terms, so there is nothing to opt out of. To exercise your rights, contact help@easyentry.ai.

For residents of the EU, UK, or Canada

EasyEntry is based in the United States and the Service is primarily intended for U.S. customers. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. and the other countries where our providers operate. We are happy to respond to data-protection requests from international users but do not currently offer EU-specific features such as a Data Protection Officer or EU representative.

8. Children

The Service is not directed at children under 18 and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact help@easyentry.ai and we will delete it.

9. Third-Party Services

The Service sends you to pages run by others — Stripe's checkout and billing pages — and loads fonts from Google. This Privacy Policy does not apply to those services; please review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page, update the "Last updated" date above, and notify you by email when possible. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact

Email: help@easyentry.ai

EasyEntry LLC
New York, United States