Privacy

Privacy Notice

Effective and last updated August 18, 2026

Nothing you load into SettlePair is transmitted to us. The invoice CSV and the bank transactions CSV are read by JavaScript running in your browser tab, held in memory for the session, and discarded when you refresh or close the tab — unless you explicitly choose to save the session, in which case it is kept on your own device only and expires after 30 days. There is no upload endpoint, and no server-side copy of your financial data. An account is required to import your own files; it holds your email address and nothing from your books.

Browser-local document processing

CSV parsing, column mapping, match scoring, allocation arithmetic and CSV export are all client-side code. Selecting a file uses the browser's file input; the file's contents never leave the page. The export you download is generated in the tab from the data already in memory. As a result, our servers hold no invoices, transactions, customer names, amounts, decisions or allocations. Anything you choose to keep — payer rules, or a saved session — is written only to your own device, as described below.

Your account, and the email address we hold

Importing your own files requires a free beta account, so we do hold one piece of personal data about you: the email address you register with, plus the dates you joined, last signed in, and confirmed the address. We use it to sign you in, to confirm the address, to reset a forgotten password, and to send occasional beta updates you can unsubscribe from. We do not sell it, and we do not use it for advertising.

Nothing about your books is attached to the account. No invoice, bank transaction, customer name, amount, decision or allocation is ever sent to us — those stay in the browser tab, and the payer rules and saved sessions stay on your device. You can delete the account, and the address with it, at any time from your account page; deleting it erases the account row, your place on the beta list, and the link between your address and any feedback you sent. Device-local data is separate and is wiped with the control in the workbench footer.

What limited website data may be involved

Visiting settlepair.com is an ordinary web request. We do not run third-party analytics, advertising or tracking scripts on the site. However, like any hosted website, the hosting and content-delivery infrastructure that serves these pages will normally generate technical server logs. Such logs typically contain information such as:

  • IP address and approximate region derived from it
  • date and time of the request
  • the URL requested and the response status
  • browser user agent and referring page

These logs are a standard property of web hosting rather than something SettlePair collects for its own purposes, and they never contain the contents of your reconciliation files.

If you email us, we receive whatever you choose to put in that message, including your email address.

Why this data exists

  • To deliver the pages and files you request and keep the site working.
  • To detect, investigate and prevent abuse, misuse and technical faults.
  • To respond to you when you contact us by email.
  • To meet legal obligations where they apply.

Cookies and what is kept on your device

SettlePair sets no advertising, analytics or tracking cookies, and there is no consent banner because there is nothing non-essential to consent to. Two things are stored on your own computer, in your browser's IndexedDB. Neither is ever transmitted to us.

  • Payer rules: a fragment of a bank description (for example NGD HOLDINGS) and the customer name you mapped it to, plus how many times it has been used. No amounts, invoice numbers, dates or memo text. Rules are kept until you delete them.
  • A saved session: only if you explicitly choose Keep it when you import. It holds the imported rows, your column mapping, decisions and allocations so a closed tab does not destroy your work. Saved sessions expire automatically after 30 days.

If you do not opt in, nothing about your files is written to disk and refreshing the page clears every invoice, transaction, decision and allocation. You can delete everything at any time with the “Clear everything stored on this device” control in the workbench footer or on the security page. Removing the data takes effect immediately and only affects the browser you use it in.

Disclosures and service providers

We do not sell or rent personal information, and we do not share your reconciliation data with anyone, because we never receive it. The site depends on third-party hosting and content-delivery infrastructure to serve the pages, and public pages load a web font from Google Fonts, which is a request to that provider from your browser. Beyond that, we would only disclose information where the law requires it or to protect the service against misuse.

SettlePair does not connect to banks or accounting systems, holds no credentials, and calls no external matching, AI or enrichment service.

Retention

Reconciliation data lives only in your open tab and is gone on refresh or close, unless you opted to save the session on your device (it expires after 30 days and can be wiped at any time). Your account email address is kept until you delete the account. Technical server logs are retained by the hosting infrastructure for a limited period in the ordinary course of operating a website. Email correspondence is kept for as long as needed to deal with your enquiry and any follow-up.

Security and its limits

The strongest protection here is architectural: files that are never uploaded cannot be exposed by us. The site is served over HTTPS. We cannot, and do not, promise absolute security — the security of your own device, browser and extensions is outside our control, and files you export are on your disk and your responsibility. The Security and Data Handling page sets out the threat model in more detail.

International visitors

SettlePair is available on the public internet and may be accessed from anywhere. The hosting and content-delivery infrastructure that serves the site operates across multiple countries, so the technical request data described above may be handled outside your own country. Your reconciliation files stay on your device wherever you are.

Children

SettlePair is a business bookkeeping tool. It is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has sent us personal information by email, contact us and we will delete it.

Your privacy choices and requests

You can clear a working session at any time by refreshing or closing the tab, and wipe anything saved on your device with the control in the workbench footer. Your registered account — email address, sign-in dates, and nothing from your books — can be deleted from your account page. Beyond that we hold no copy of your financial data, so there is generally nothing further for us to look up, export, correct or delete on request. If you have a question about the limited technical data involved in serving the site, or wish to exercise a privacy right available to you under local law, write to support@settlepair.com with "Privacy request" in the subject line and we will do what we reasonably can, including telling you plainly when the data simply does not exist.

Limitations you should know

  • SettlePair is a review aid, not an accounting system, and makes no claim of accounting accuracy. Every suggestion needs human confirmation.
  • Automatic matching is deterministic and strictly one payment to one invoice.
  • Very large files are limited by your device's memory, since all work happens in the tab.
  • If you use a shared machine, delete the exported settlepair-reconciliation.csv from your downloads folder when you are finished with it.

Changes to this notice

We may update this notice as the product develops. The effective date at the top of the page changes when we do, and the current version is always the one published here.

Contact

Privacy questions: support@settlepair.com. More answers are in the FAQ.