---
title: "Security — Crossfooted"
description: "How Crossfooted protects your bank statements: encryption, short retention, account protection, and AI providers with a zero data retention policy."
url: "https://crossfooted.com/security"
---

Security

# How we protect your statements

Last updated: October 12, 2026

Bank statements are some of the most sensitive files you have. Here’s how Crossfooted keeps them safe.

## Nothing is sent until you press Convert

You add your PDFs first and can remove any of them. Nothing leaves your device until you press Convert.

## Encrypted in transit and at rest

Every connection uses TLS (HTTPS). Stored PDFs and results are encrypted with AES-256-GCM using our own key, on top of our storage provider’s encryption.

## Only you can open your statements

Each statement and its results can be opened only from your account. We don’t look at your statements unless you ask us to, for example to check a conversion that went wrong.

## Kept briefly, then deleted

-   Each PDF and its results are deleted automatically 24 hours (Free) or 30 days (paid plans) after the conversion. If a conversion fails, the PDF is deleted within 24 hours.
-   You can delete any statement sooner with one click, or delete your account and everything in it.
-   As a safety net, any stored file older than 31 days is removed.

## AI that doesn’t keep your data

Statements are read by AI providers with a zero data retention policy: they process your statement to complete the request, and don’t store it or use it to train their models. We never use your statements to train AI.

## Account protection

-   Passwords are stored only as a secure hash, never in readable form.
-   Repeated sign-in attempts are limited, to stop password guessing.
-   Resetting your password signs you out on every other device.
-   Deleting your account always asks for your password.

## Payments

Payments are handled by Polar, our merchant of record. Your card details go straight to them; we never see or store them.

## Report a security issue

If you think you’ve found a security problem, email [hello@crossfooted.com](mailto:hello@crossfooted.com). We’ll look into it right away. More detail on how we handle your information is in our [Privacy Policy](https://crossfooted.com/privacy).

[← Back to home](https://crossfooted.com/)