Privacy Policy — Bank Statement Password

A free tool by India Customer Care · Last updated: 2026-11-02

PDF, spreadsheet and image processing runs in your browser. Document contents and passwords are not uploaded during normal tool use. We do receive filename-recognition data, visit data and information you choose to submit in forms, including an optional sample PDF. The sections below explain these exceptions and what is saved on your device.

Who we are
Your PDFs and passwords
What we do collect
Stored on your device
Cookies & Google AdSense
Third-party services
How we use information
Retention
Your rights & choices
Children
Security
Changes to this policy
Contact & grievances

1. Who we are

The Bank Statement Password tool is operated by India Customer Care (“we”, “us”, “our”). Its home is g.indiacustomercare.com/bank-statement-password/. This policy explains how the tool handles information. It applies to this tool specifically; where the tool differs from the wider India Customer Care website, this policy governs the tool.

2. Your PDFs and passwords — never uploaded

This is the most important point, so we state it plainly:

Your PDF file is processed only in your browser. When you choose or drag in a file, it is read into your browser’s memory and decrypted locally using open-source libraries (pdf.js to verify the password and mupdf to produce the unlocked copy). The file is never sent to our servers or any third party.
Your password is never transmitted. Whether we suggest it or you type it in, it is used only on your device and is never sent to us.
File details you see (the “File details” panel) are read locally. Metadata such as file name, size, PDF version, encryption type, permissions, author and dates is extracted in your browser. If you use the “Download all as JSON” button, that file is created and saved on your device — it is not sent anywhere.
The unlocked PDF stays with you. Downloading or opening the password-removed copy happens entirely in your browser.
Multiple files. When you decrypt several files at once, each one is handled the same way — locally — and the results table (including any passwords shown) lives only in your browser window until you close it.

This policy also covers Statement → Excel, PDF Organizer, Combine Statements, Images → PDF, Excel ↔ CSV, PDF → Images, Watermark & Page Numbers and PDF Redaction. Their source documents, extracted transactions, previews, edits and generated downloads are processed locally. Redaction creates an image-only PDF; cover every sensitive occurrence and review the exported copy. Statement → Excel is experimental and does not support scanned statements. The optional sample attachment in a submitted suggestion is a separate upload described below.

3. What we do collect

We only receive information you choose to submit through a form, plus limited technical data to prevent abuse and improve recognition. Specifically:

When you…	We receive	Why
Subscribe to alerts	Email (and optionally phone), and the company it relates to	To notify you if a bank changes its password rule
Report a problem	Your message and any contact detail you add	To fix issues you tell us about
Suggest / submit a new format	Company name, website, sender email, the password rule, an example, an optional contact, and — only if you choose to attach one — a sample PDF	To add or correct password rules
Help us “learn” a password that worked	The reusable rule pattern, bank/document name, source filename, language and country, plus IP address, browser type and a derived anti-abuse fingerprint. The actual password and PDF contents are not included in this request.	To auto-support that format next time; IP/browser/country are used only to de-duplicate and prevent abuse (we require confirmation from multiple independent people before trusting a new rule)
Open a file (filename recognition)	The file name, our guessed company, and the matched format signature	To improve automatic recognition of statements

About optional sample PDFs. You are never required to attach a file. If you voluntarily attach a sample to a “new format” submission, please remove or redact personal details first. Submitted samples are stored privately, used only to work out the password rule, are not public, and can be deleted on request.

Like virtually all websites, our server and our infrastructure providers also process standard request logs (such as IP address, approximate location, browser/device type, and pages requested) for security, abuse-prevention and basic analytics.

Counting visits. To understand how many people use the tool, we record a visit only after you interact with a page — a tap, click, key press or scroll. For each counted visit we store the date and time, your device type (mobile, tablet or desktop), your IP address, your country (provided by our network provider, Cloudflare), and the page address without any query text. If you open more pages in the same tab within 30 minutes, those are counted too, without needing another interaction. Automated bots are filtered out; your browser’s user-agent is checked to do this but is not stored. This uses a short-lived timing marker in your browser’s session storage, and sets no cookies.

4. Information stored on your device

Workbench continuation: choosing a next tool can place a prepared PDF of up to 3 MB, its filename and destination in this tab’s session storage. This copy is not encrypted by the app and is never uploaded. The receiving tool removes the transfer before reading it; transfers older than five minutes are rejected. An unused copy can remain until this tab’s session ends. Larger files, blocked/full storage or preparation failures require downloading and choosing the copy again. Continuing from an editing tool uses its prepared output, not the unedited original. Changing edits invalidates the continuation until a fresh output is prepared. Redacted and image-only outputs are not offered for Statement → Excel. For Statement → Excel, the original PDF and its verified password may be transferred instead, so conversion does not require the PDF download engine. Other tools receive the prepared PDF without that password.

Standalone saved passwords do not belong to a person or bank. They are tried on each unlock, including batch unlocks, even when saved people or Remember are switched off. Case and spaces are preserved exactly. They remain in this browser’s local storage without encryption until removed individually or site data is cleared; they are not uploaded. The encrypted backup includes them. Merge keeps existing and imported passwords, removing only exact duplicates; Overwrite replaces the saved list, and an older backup without this list clears it on Overwrite. Turning off Remember does not remove these passwords.

“Try all people's save details” is checked by default. Your explicit on/off choice is remembered for later visits.

PAN is displayed and saved in uppercase. Basic PAN-format checks and, for individuals, a comparison of character 5 with the last word of the entered name run only on your device. Name order may differ from the surname registered with PAN; warnings do not verify identity or PAN registration. Saving under an existing person label asks for confirmation before replacing their details.

Remembered unlock fields. “Remember my details on this device” is on by default. All detail fields in the unlock form are saved as you type. Name, date of birth, PAN and mobile are shared across unlock pages; customer ID, account number, card last four, folio, TAN and filing date stay with the bank/document page where entered. The home page has its own bank-specific store. Returning in the same browser and site restores saved details when Remember is on. Clearing a field also clears its remembered value.
Saved people. The labels and filled details you explicitly save as people, and the multiple-people switch, persist across visits. Turning off Remember or the multiple-people switch does not delete these profiles. Use each person’s Remove button to delete them; loading and saving under the same label asks before replacing that person’s details.
Other saved information. We save the last successfully matched bank/document type and time, detected country, and custom candidates. “Check & teach” saves a verified password locally for future attempts, even when Remember is off; suggestions may also add a local candidate. These custom passwords are not sent by the learning request. A learned rule, filename and technical context are sent as described in section 3.
Files and other tool settings. Selected files, extracted tables, edits, redaction boxes, PDF passwords typed into the other tools, and conversion settings are not saved for a later visit. Choose files again after leaving or reloading. Exception: the unlock page’s Convert to Excel link can temporarily place the selected PDF and its password in this tab’s session storage for the converter to consume. It removes the handoff on reading; an unused handoff can remain until the tab session ends.
Encrypted backups. Advanced exports all local bsp_ data, including saved people, remembered fields, custom passwords, preferences and last-match information. The downloaded JSON is encrypted locally with AES-256-GCM and a key derived using PBKDF2-SHA-256 (150,000 iterations). The backup password is not saved. Import decrypts on your device and either merges or overwrites this app’s saved data. Backup passwords and backup contents are not uploaded. Keep the file and password safe; we cannot recover a forgotten password.

Local storage is not an encrypted vault. Remembered details, people and custom passwords are stored without app-level encryption. Anyone with access to this browser profile, or code running on this site, may be able to read them. Only exported backups are encrypted. Restoration depends on the same browser profile and site address (scheme, host and port); private browsing, blocked/full storage or clearing site data can prevent persistence.

Deleting saved data. Unticking Remember clears automatic common and per-page details only. It keeps saved people, custom passwords, last-match information and preferences. Remove people individually, use Forget for the last-match bar, or clear this site’s data in your browser to remove all locally saved information. Downloaded PDFs, spreadsheets and backup files must be deleted separately from your device.

5. Cookies & Google AdSense advertising

This tool is free and is supported by advertising. We use Google AdSense to display ads. This involves cookies and similar technologies:

Google, as a third-party vendor, uses cookies to serve ads on this site.
Google’s use of advertising cookies (including the Google advertising cookie) enables it and its partners to serve ads to you based on your visits to this and other sites on the Internet.
These cookies may be used for personalised (interest-based) advertising, ad measurement, and to limit how many times you see the same ad.
Third-party vendors and ad networks may also serve ads and set their own cookies.

Your ad choices

You can opt out of personalised advertising by Google at Google Ads Settings.
You can opt out of some third-party vendors’ use of cookies for personalised ads at aboutads.info/choices, NAI opt-out, or (in Europe) youronlinechoices.eu.
How Google uses data when you use our site is described at policies.google.com/technologies/partner-sites.
You can also manage or block cookies in your browser settings.

Consent (EEA, UK & similar regions). Where required by law, ads are shown only after you give consent through the consent prompt, and you can withdraw or change your choice at any time. Our advertising is configured to respect these consent signals.

6. Third-party services we load

To work in your browser, the tool loads a small number of trusted third-party resources. When your browser fetches these, the provider may receive your IP address and basic request data as a normal part of serving the file:

PDF.js, PDF-LIB and SheetJS — bundled with this site for local document processing. MuPDF — fetched from jsDelivr when creating an unlocked PDF. Fetching library code does not upload your documents.
Google Fonts — for the site’s typefaces.
Google AdSense — for advertising (see above).
A lightweight network/trace request may be used to detect your country so we can show the right content; this is not used to identify you.
Google Programmable Search — Site search; queries you submit go to Google.

We do not sell your personal information.

7. How we use information

To provide and improve the tool, including better recognition of statements and password rules.
To send you alerts you subscribed to, and to respond to reports and suggestions.
To keep the service secure and prevent abuse (e.g. requiring multiple independent confirmations before trusting a crowd-submitted rule).
To display advertising that keeps the tool free.

8. Retention

We keep submitted information only as long as needed for the purpose above: subscription details until you unsubscribe; reports and suggestions until resolved and for a reasonable record afterward; optional sample files until the rule is confirmed or you ask us to delete them; and standard logs for a limited period for security.

9. Your rights & choices

Access / deletion — you can ask us what information we hold about you and request that we delete it (for example, unsubscribe, or remove a sample file you submitted).
Unsubscribe — alert emails include a way to opt out; you can also contact us.
Ad personalisation — manage this via the links in section 5.
On-device data — clear it anytime via your browser.

10. Children

This tool is intended for adults managing their own or their family’s documents. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will remove it.

11. Security

Because the sensitive work — reading and decrypting your PDF — happens entirely on your device, your most private data (the statement and its password) is never exposed to us or the network. For the limited information we do receive, we apply reasonable technical and organisational measures. No method of transmission or storage is 100% secure, but the local-only design keeps your exposure minimal by default.

12. Changes to this policy

This tool is actively developed, and this policy is updated whenever the tool’s functionality changes — for example when a feature that handles data is added or removed. The “Last updated” date at the top always reflects the current version. Significant changes will be highlighted on the tool. Please review this page periodically.

13. Contact & grievances

For any privacy question, data-access or deletion request, or grievance, contact India Customer Care:

Email: [email protected]
Website: www.indiacustomercare.com

In accordance with applicable Indian data-protection rules, we aim to acknowledge grievances promptly and resolve them within statutory timelines.

← Back to the tool