FullaBANK STATEMENT CONVERTER
All guides

Bank statement privacy and the 24-hour content lifetime

Statement sources, extracted rows, review events, and exports share one 24-hour deadline and stay behind authorized access.

Updated 2026-08-31 6 min read

Step by step

  1. 01

    Upload to private storage

    Source files and downloads stay behind authorized proxy access instead of public object URLs.

  2. 02

    Process through named routes

    Rendered pages go only to routes allowed by the active evaluated provider policy.

  3. 03

    Review within the same deadline

    Rows, evidence, review events, and exports inherit the source content expiry.

  4. 04

    Fence expired content

    Access closes at expiry even when a failed storage deletion needs another attempt.

Private source and export access

Fulla uses private encrypted object storage. Source and export requests are authorized and proxied, so the service does not expose public object URLs for financial content.

Account and workspace records needed to operate the service can outlive the financial-content window. The Privacy notice lists those records separately.

Named extraction boundaries

Application-rendered page images go through OpenRouter only to a model and provider endpoint pinned by the active evaluated policy. Eligible routes are GLM through DeepInfra ZDR, Mistral through Mistral ZDR, and Gemini Flash through Google Vertex.

The selected Gemini route uses a current no-retention policy and data collection denial, but it is not formal OpenRouter ZDR.

Expiry and support consent

Uploaded and derived financial content expires 24 hours after presign. A failed deletion remains fenced from access and is retried rather than silently extending access.

Support can inspect one currently owned document only after explicit versioned consent on a ticket and before expiry. Operator access is audited, and revocation clears the document link.

Questions about this guide

Does a failed delete extend access?

No. The content remains fenced from access while deletion is retried.

Are statement objects publicly addressable?

No. Source and export access is authorized and proxied rather than exposed through public object URLs.

Can support browse all workspace documents?

No. Consent applies to one selected, currently owned document on a ticket and ends at expiry or revocation.