What a statement gives away
Your name, your account number or IBAN, often your address, your balance, your salary and who pays it, your rent, your school fees, and every shop you used. That is enough for a convincing scam aimed at you, and it can support fraud in your name. It does not by itself let someone log in to your account or move your money.
Five questions to ask before you upload one
- 1. Does the file leave your device?
- Most online tools read it on their own servers. A few say they run entirely in your browser; if that matters, test it by disconnecting from the internet after the page loads and converting a file. Desktop software also keeps the file on your computer.
- 2. How long is it kept, and where?
- Look for a period in plain words: deleted after processing, kept for 24 hours, kept until you delete it. If you make an account, ask about the extracted lines as well as the PDF, because they are the sensitive part.
- 3. Who else reads it?
- Many tools now send your statement to an AI model run by another company. The policy should say so, and should say whether that company may keep it or train on it.
- 4. Does it want your bank login?
- A converter has no need for it. You download the statement and give the tool the file. A PDF's own password is a different thing: it opens that one file and logs in to nothing. Never type your online-banking password into a converter.
- 5. Is anyone accountable?
- Look for a named person or company, an address that gets answered, and a privacy policy written about this product. A security certification such as SOC 2 is good evidence; a badge with nothing behind it is not.
The options, safest first
- Your bank’s own export. If it offers CSV or Excel, nothing leaves the bank. Where to look.
- Software on your own computer, such as Excel’s PDF import or desktop PDF tools. You check the totals yourself. How.
- A tool that runs in your browser. The file stays on your device, and you can test that.
- An online tool or an AI assistant, after reading what it keeps and who reads it. With ChatGPT, use a Temporary Chat: what OpenAI says it does with your file.
Our comparison of converters sets out where each one says your file goes and how long it stays, from each product’s own site as read on Nov 3, 2026.
How MyFulus answers those five questions
- Yes, the file leaves your device. It is read on our server, in the United States.
- A statement you convert is read in memory and never written to disk or a database. The converted lines are deleted after 60 minutes or when you press Delete. A statement you choose to add to an account’s ledger is stored until you delete it.
- Its text goes to an AI model through OpenRouter, instructed to use only providers that do not retain prompts or train on your data. We have to take those providers at their word.
- It never asks for your bank login. If a PDF is locked, the file’s own password is used once to open it and is not stored, logged or sent to the AI provider.
- It is built and run by Amman Abbasi. It has no security certification and is a new product, so if your firm needs either, use a tool that has them.
The privacy policy is the full version.
Quick answers
Is it safe to upload a bank statement to an online converter?
It can be, if you have read what the tool does with it. Check whether the file leaves your device, how long it is kept, who else reads it, and who is accountable. Never give a converter your online-banking login. If a tool does not say what it keeps, assume it keeps everything.
What can someone do with my bank statement?
It shows your name, your account number or IBAN, often your address, your balance and every payment you made. That is enough for a convincing scam aimed at you and can support fraud in your name. It does not by itself let someone log in to your account.
What is the safest way to convert a bank statement?
Start with your bank's own export if it offers CSV or Excel, because nothing leaves the bank. Next is software that runs on your own computer or entirely in your browser. After that, an online tool whose policy you have read and whose answers you are comfortable with.
Does MyFulus keep my bank statement?
No. A statement you convert is read in memory and never written to disk or a database, and the converted lines are deleted after 60 minutes or when you press Delete. It does leave your device: it is read on our server, and its text goes to an AI model under a no-retention instruction. MyFulus has no security certification.