Security
Your documents are invoices, statements and receipts. Here's how we look after them, who else handles them, and what we don't claim.
Your account
- No password to steal. You sign in with Google, and we only ask for your name and email address.
- We never see your card. Payments are handled by Dodo Payments, our merchant of record, so the charge on your statement comes from them. We only see that it went through, and the last four digits for your receipt.
- Only you can open your documents. The database itself enforces this, and we test it regularly on the live site.
- Encrypted in transit and at rest. Everything travels over HTTPS, and stored files are encrypted by our storage provider.
How long files are kept
- The document you upload is deleted automatically within three days, whether or not the extraction finished.
- The sheet made from it stays in your library until you delete it, which you can do at any time.
The full detail, including billing records, is in the Privacy Policy.
Who handles your data
We don't sell your data, and we don't use your documents to train AI. The companies that help us run Parsebay are listed in our Privacy Policy. Need a Data Processing Agreement? Email [email protected] and we'll send you one.
Independent check
Qualys SSL Labs rates parsebay.com A+ (tested 15 September 2026). You can run the same test yourself.
Certifications
We aren't SOC 2 or ISO 27001 certified yet, and we haven't had an outside penetration test. We're also not set up for health data covered by HIPAA.
Reporting a problem
Found a security issue? Email [email protected] and we'll reply within three working days. Details for researchers are at /.well-known/security.txt.
Please test only with your own account, and don't run automated scans against the live site. We don't offer a paid bug bounty, but we're happy to credit you.