Security

A bank statement contains sensitive information. Before uploading, understand which processing method you are choosing.

Start with a statement, without a banking password

In this process, you upload an export from your bank. You do not need to connect your bank or provide banking credentials. You may cover your name and account number. Keep dates, amounts and merchants visible for analysis.

What is read in your browser

CSV, OFX/QFX, MT940 and CAMT.053 are read in your browser. Parsed data may be stored temporarily in that browser so you can continue after signing in. Saving financial data to your account is a separate step. Compatibility depends on the file structure.

When an external processor is involved

Optional AI reading of PDFs or photos, and chat, use Anthropic in the USA. You confirm use in the application. Data is then processed outside your device, not exclusively in the EU. See the privacy policy for scope and terms.

Clearing data and deleting an account are separate steps

In settings, you can clear imported financial data or delete your account after password verification. Clearing data preserves settings and learned categories. Some audit and anonymized records are retained under the privacy policy. This does not mean every record is deleted immediately.

Who operates the service

The operator is Harbor Equity a.s., Prague, Czech Republic, IČO 21989249. Send questions to hello@vestelonflow.com. See security and data processing for details.

Explore FLOW and an illustrative result

You can access, correct, erase, restrict or object to processing, request portability of your data, and complain to your supervisory authority (in the Czech Republic: ÚOOÚ, uoou.gov.cz). To exercise any right, email hello@vestelonflow.com.