Is it safe to upload bank statements to Pulget?
What happens to a statement after you upload it, and what stays in your hands. The privacy policy has the full detail.
No bank login
Pulget never connects to your bank and never asks for your online banking password. It sees only the files you choose to upload.
Files stored in the EU
Uploaded files are kept in Cloudflare R2 storage in the EU. They have no public address: to open one, your browser gets a signed link that expires after a minute.
Who reads your statement
A language model reads each statement to extract its transactions. The contents go to OpenRouter, which passes them to a model such as Claude Haiku 4.5 on Amazon Bedrock, with Google as the last fallback; the privacy policy lists every model in order. Pulget does not train models on your documents. What each provider keeps is set by its own terms.
Account numbers are masked
Full bank account and card numbers are never stored. Pulget keeps only enough of each to tell your accounts apart, such as the last four digits, and never stores a card security code.
Sessions you can see
Settings list every device you are signed in on, and one button signs out all the others. A session ends seven days after it was last used. Passwords are stored only as a salted hash.
Export or delete everything
Download your whole workspace as one JSON file, or your transactions as CSV, at any time. Deleting your account removes your workspace, documents and uploaded files for good. Encrypted database backups keep deleted data for four to five weeks, until they rotate out.
Report a vulnerability
If you find a security problem, email us privately with what you found and the steps to reproduce it. Please do not publish it before we have replied.
[email protected]The privacy policy names every service provider and how long each kind of data is kept. The status page shows whether processing is running.
Start with one statement
Free during preview. No card required.