Privacy Policy

Last updated 20 October 2026 · Questions: support@sheetfold.app

The short version

Sheetfold is run by DAVOS TECHNOLOGIES S.R.L. in Bucharest, Romania. We are responsible for your data.
Your PDF is opened in your browser. To read it, each page goes through our server to OpenRouter and Google Gemini, which return its rows. We store none of it: not the file, not the pages, not the transactions.
The one time we keep a statement is when you send us a problem report. It is kept for up to 30 days to fix the reading, then deleted.
There are no accounts, no ads and no tracking cookies.

1. Who we are

Sheetfold (the website sheetfold.app and its API) is operated by:

DAVOS TECHNOLOGIES S.R.L.
Str. Sg. Constantin Moise nr. 5D, bl. 2, sc. 2, ap. B5, Sector 6, Bucharest, Romania
Company number J2024018787003 · Tax ID (CUI) 50480681
Email: support@sheetfold.app

We are the data controller for the personal data described here. Write to us at the address above for anything about your data.

2. How a statement is read

A statement holds personal data: names, account numbers and the people and companies you paid or were paid by. We use it only to convert the statement for you. The legal basis is the contract with you: you ask us to convert it.

The PDF is opened and checked in your browser. For each page, only what that page needs to be read is sent: its text, an image of it, or for a second look that single page.

Our server passes the page to OpenRouter, which has it read by Google Gemini and returns the rows. Both may use it only to provide that service and not to train models. They may keep it for a limited time for abuse and security monitoring, under their own terms.

We do not store the page, the answer or the transactions. Our logs record only what kind of error happened, never statement content. The results, your corrections and your downloads exist only in your browser: close the tab and they are gone.

3. Problem reports

If you press "Send us this statement", we store a report: every row Sheetfold read (including the account number), your corrections, your note, your browser and screen size and, unless you untick it, the PDF.

We use a report only to find out why the statement was read wrongly and to fix it, keep it for up to 30 days and then delete it. The legal basis is your consent, given by sending it. To have a report deleted sooner, email us the reference shown after sending.

4. Technical data and storage

Our hosting provider, Cloudflare, processes your IP address to deliver the site, protect it from attacks and limit how many pages one visitor can send per minute. We do not store IP addresses.

The site sets no cookies. Your browser remembers your light or dark theme in its local storage; nothing else is kept.

5. Who processes your data

These providers process data only to provide their service to us:

Cloudflare: hosting of the website and API, network security, storage of problem reports.
OpenRouter: passes each page to the model that reads it.
Google: the Gemini model that reads the pages.

Some of these providers are based in or process data in the United States. Those transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. We may also disclose data when the law requires it.

6. Your rights

Under the GDPR you can ask for a copy of your data, its correction or deletion, and object to or restrict its use. Because we keep no statement data apart from problem reports, this mostly concerns reports: email support@sheetfold.app with the reference. We answer within one month.

You can also complain to the Romanian data protection authority, ANSPDCP, or to the authority in the country where you live.

7. Changes

If we change how we use data, we update this page and the date at the top. If we add accounts or saved histories, this page will describe them before they launch.