Last updated: July 4, 2026
BillSyncs is a personal finance dashboard that lets you upload bank and credit card statements or transaction exports — PDF or CSV, from any bank — to visualize your spending. This policy explains exactly how your data is handled — with full transparency.
🔒 BillSyncs offers three processing modes. In Lite and Lite Multi modes, your PDFs never reach the BillSyncs server — they are parsed entirely on your device using JavaScript (including files you fetch from your own Google Drive, which download directly into your browser). In Full mode, your PDFs are transmitted over encrypted HTTPS, processed in memory on a privately owned server, and immediately discarded. No data is ever stored, shared, or sold in any mode.
BillSyncs gives you a choice of how your data is processed:
| Feature | 🌐 Lite | 🌐 Lite Multi (Beta) | ⚡ Full |
|---|---|---|---|
| Where data is processed | Your browser only | Your browser only | BillSyncs server |
| Data sent to BillSyncs server? | ❌ Never | ❌ Never | ✅ Over HTTPS, immediately discarded |
| Number of files | 1 at a time | Multiple files & folders | Multiple files & folders |
| Parsing engine | JavaScript (in browser) | JavaScript (in browser) | Python/pdfplumber (server) |
| Google Drive | Not available | ✅ Downloads directly to your browser | ✅ Transferred to server for parsing |
Both PDF and CSV files are handled the same way in every mode, and duplicate transactions across overlapping files are removed automatically during import.
In Lite mode (one file) and Lite Multi mode (multiple files and folders), your PDFs are read and parsed entirely inside your browser using JavaScript. Files are never uploaded to any BillSyncs server. This is the most private option — even the BillSyncs server operator cannot see your data because it never reaches the server. If you connect Google Drive in Lite Multi mode, the files you pick are downloaded by your browser directly from Google's servers and parsed on your device — they do not pass through the BillSyncs server. Use a Lite mode if you want absolute certainty that your financial data stays on your device.
In Full mode, your PDF is transmitted over HTTPS to the BillSyncs server — a privately owned computer (not a commercial cloud provider). The server uses Python and pdfplumber to extract your transactions with higher accuracy, returns the result to your browser, and immediately discards the file. Your data is:
In transit: All data between your browser and the BillSyncs server travels over HTTPS (TLS encryption). Cloudflare provides the TLS endpoint — your PDF content is encrypted in transit and not readable by anyone on the network.
On the server: Once received, the PDF is processed in plaintext in server memory — this is technically necessary for the parser to read your transactions. The server does not log or write financial data to disk. However, as with any server-side application, the server operator has physical access to the server's memory and logs.
⚠️ Maximum privacy tip: Use Lite mode if you want your data to never leave your device. Full mode is more accurate and supports multiple files, but involves server processing.
Google Drive integration is optional and available in Lite Multi and Full modes. If you choose to connect Google Drive, BillSyncs requests the drive.readonly (read-only) scope and accesses only the PDF files and folders you explicitly select in the Google file picker.
What we access: only the files and folders you pick. When you pick a folder, BillSyncs lists and downloads only the PDF files inside it (including subfolders). We never browse, index, or access anything else in your Drive.
How the data flows:
What we store: nothing. Your Google OAuth access token lives only in your browser's memory for the current session and is never sent to or stored on the BillSyncs server. We do not retain, copy, or cache any Google Drive file content, file metadata, or account information after parsing completes. We never modify, create, share, or delete anything in your Drive.
What we never do with Google user data: we do not sell it, do not use it for advertising, do not use it to train AI or machine-learning models, do not transfer it to third parties, and do not use it for any purpose other than generating your own financial dashboard for you, at your request.
BillSyncs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke BillSyncs' access to your Google account at any time at myaccount.google.com/permissions.
We retain nothing on our servers. There is no database. There are no user accounts or profiles. Your financial data exists only briefly in server memory during active parsing (Full mode only), and is gone the moment your dashboard is returned to your browser. Session cookies contain only a random token — no personal or financial data.
Saved dashboard (on your device): to support incremental updates, your parsed transactions are saved in your browser's local storage on your own device after a dashboard is generated. This data never leaves your browser and is not accessible to the BillSyncs server. You can delete it at any time with the "Clear" button on the upload screen, or by clearing your browser's site data. Avoid using this feature on shared or public computers.
BillSyncs uses a shared password to prevent unauthorized access from the internet. We store a session cookie in your browser to keep you logged in. This cookie contains only a cryptographically random session token — no personal or financial data is stored in the cookie.
BillSyncs is not directed at children under 13 and we do not knowingly collect data from children.
We may update this policy occasionally. Changes will be posted at this URL with an updated date.
Questions about privacy? Email us at [email protected]