Privacy, Terms & Data Protection

1. Sensitivity of what you upload

Bank statements contain highly confidential and personally identifiable information (PII) — account numbers, balances, counterparty names and transaction detail. We treat every upload as sensitive personal and financial data and protect it with appropriate technical and organisational measures, including encryption in transit (TLS) and at rest, access controls and audit logging.

2. Purpose limitation

Uploaded files are processed solely to generate the analysis you request — parsing and classifying transactions and producing the report and working paper. We do not use your documents for advertising, profiling or training AI models, and we do not sell your data.

3. What we retain, and what we do not

We minimise retention:

• Raw bank-statement files (PDF/CSV/Excel) are read in memory to extract the data and are NOT stored afterwards — the original file is discarded once processing completes.
• The extracted data (transactions, balances, classifications) is retained as the analysis you asked us to prepare so you can view, search and export it.
• Account numbers are masked before storage — only the last four digits are kept, which is enough for you to tell your accounts apart. The full number is never written to our database.
• Temporary processing artifacts are not persisted beyond what is needed to return your result.

4. Retention and deletion

Analyses are automatically deleted 12 months after they are created. You do not need to do anything for this to happen, and it applies whether or not you are still using your account.

You can also delete any analysis yourself at any time from within the app, which immediately and permanently removes its extracted data.

Deleting your account, from Settings, permanently removes your profile and every analysis, statement, transaction and correction belonging to it. This cannot be undone, and any unused credits are not refunded. Records of payments you have made are kept separately, because we are required to retain them.

Deleted data may persist for a short period in encrypted database backups before those backups age out.

5. Your rights

Subject to applicable law you have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. We do not sell personal information. To exercise any right, email support@lissafi.app from the address on your account and we will respond within 30 days.

1. An analysis aid

The Platform produces an automated analysis of the bank statements you provide. Its output is derived by automated processing and should be verified against the source records before being relied upon for any decision.

2. Your responsibility for uploaded documents

You are solely responsible for ensuring you have the legal right and authority to upload each document you submit and to have it processed by the Platform. You must not upload documents you are not authorised to disclose, and you are responsible for the accuracy of the data you provide.

3. Acceptable use

You agree to use the Platform only for legitimate analysis, in compliance with applicable law, and not to attempt to access other users' data or to circumvent access controls.

4. No warranty on automated output

Automated parsing, classification and counterparty extraction may contain errors and must be verified. The Platform is provided without warranty that its output is complete or correct.

5. The financial plan and Budget Plan are budgeting aids, not advice

Where you request a financial plan, it is generated by an automated system from the figures already computed for your own analysis — your recorded income, spending by category, and recurring payments. Budget Plan works the same way from figures you type in yourself, using fixed rules rather than an AI model. Neither is financial, investment, tax or legal advice, neither is prepared or reviewed by a licensed advisor, and neither must be relied upon as such. Neither ever recommends a specific investment, loan, insurance product or tax strategy.

Security measures

• Encryption of data in transit (TLS) and at rest.
• Per-user access control — you can only see your own analyses.
• Server-side-only AI processing; documents are never sent to the browser side of AI requests.
• Data minimization — raw bank-statement files are not persisted; only the extracted data needed for your analysis is retained.

Lawful basis (NDPA / GDPR)

We process uploaded documents on the basis of your consent (captured before upload) and the legitimate interest of producing the analysis you request. You may withdraw consent and request deletion at any time.

Who to contact

Lissafi is operated by Bethel Professional House Ltd. For anything concerning your personal data — access, correction, export, deletion, or withdrawing consent — email support@lissafi.app. For any other enquiry, email info@lissafi.app.

Write from the email address on your account where you can, so we can confirm the request is yours before acting on it. We would rather answer a little more slowly than hand someone else's bank statement to whoever asks for it.