This Privacy Policy explains how BankHelp handles personal data when you visit the website, request an offer, use a BankHelp account, upload bank statements, or use the BankHelp API. Bank statements may contain highly sensitive financial information, so BankHelp is designed to minimize unnecessary retention and access.
1. Who is responsible for the data?
SIA Twig, registration number 41203073830, Riga, Latvia operates BankHelp for its own website, account, sales-contact and security processing.
When a customer company uploads or submits a bank statement relating to another person, the customer company normally determines why that statement is processed and is responsible for having a lawful basis to do so. In that situation BankHelp processes the statement data on the customer's instructions, subject to the applicable agreement.
Privacy questions can be sent through the contact form or to info@bankhelp.eu.
2. What personal data may be processed?
- Account and company data: name, work email, company, role, account permissions and authentication-related records.
- Offer-request data: name, company, email, phone, registration number, estimated statement volume and the message you submit.
- Bank-statement data: account-holder name, personal code/SSN where present, IBAN/account identifiers, transaction dates, amounts, balances, counterparties, merchant information, references, payment descriptions and other fields contained in the submitted statement.
- Analysis data: transaction categories, confidence values, monthly/category totals, review signals and generated report data.
- Technical and security data: session information, request metadata, API-key identifiers, rate-limit/security events and information needed to protect the service.
3. Why data is processed
Data is processed to provide and secure BankHelp, authenticate users, process statements, produce requested reports, operate company workspaces and APIs, answer offer/contact requests, prevent abuse, troubleshoot errors, comply with applicable legal obligations and establish or defend legal claims where necessary.
Depending on the relationship and processing activity, the legal basis may include performance of a contract or steps requested before entering a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where BankHelp expressly asks for it.
4. Bank statements and retention
BankHelp parses supported uploaded files and stores the extracted transactions and report results in the application database so authorized users can review them later. The original uploaded file bytes are discarded after processing by the current application workflow.
Stored reviews, statements and extracted transactions remain until they are deleted by an authorized user, removed by an administrator, or handled according to a separately agreed customer retention arrangement. Customers should not retain statement data in BankHelp longer than necessary for the purpose for which it was collected.
5. Optional AI and external services
External AI refinement is optional. It is used only when the feature is configured and the relevant upload workflow permits it. Customers should assess whether they are permitted to send the relevant data to an external AI provider before enabling that option.
Historical foreign-exchange conversion requests send the required currency/date information to the configured FX-rate service; BankHelp does not need to send the bank-statement document or transaction description to obtain an FX rate.
6. Sharing and processors
Personal data may be processed by service providers that are necessary to host, secure, maintain or support BankHelp, and by an optional AI provider when that functionality is deliberately enabled. Data may also be disclosed where required by law or necessary to protect legal rights. BankHelp does not sell bank-statement data.
7. International transfers
If a configured service provider processes personal data outside the European Economic Area, the responsible party must ensure that an applicable transfer mechanism and safeguards are in place, such as an adequacy decision or appropriate contractual safeguards where required.
8. Cookies and local storage
BankHelp uses technically necessary session functionality to keep users signed in and to protect authenticated requests. The current application does not require advertising cookies to provide the service.
9. Your rights
Where the GDPR applies and subject to its conditions and exceptions, a data subject may have rights to obtain information and access, correct inaccurate data, request deletion, restrict processing, object to processing and receive portable data. If BankHelp is processing statement data only on behalf of a customer company, requests concerning that statement may need to be handled by that customer as the data controller.
You may also lodge a complaint with the competent supervisory authority. In Latvia, the supervisory authority is the Datu valsts inspekcija.
10. Security
BankHelp uses access controls and application security measures intended to reduce unauthorized access, alteration or disclosure. No online system can guarantee absolute security, and customer administrators are responsible for protecting user accounts, passwords, API credentials and devices.
11. Changes to this policy
This policy may be updated when BankHelp features, processing activities or legal requirements change. The current version and update date will be published on this page.