Privacy policy
Last updated 25 October 2026 · Applies to MyPDF (mypdf.co.za and mypdf.co.zw)
MyPDF is provided by NuClass Pvt Ltd. You can use it without an account; if you create one, we hold a small amount of account information. Your bank statements are a different matter: they are processed on your own device and never reach us.
Your statements: we don't collect them
The PDF you choose is opened and read by your own browser. Its contents, the transactions extracted from it and the CSV you download are never sent automatically to us or any third party, and no copy is kept. Statements are not sent to any text-recognition (OCR) or AI service.
Statements you choose to send us
If a statement can't be converted, you can choose to send that PDF to the MyPDF team so we can add support for it. Nothing is sent unless you press "Send this statement to MyPDF" and tick the agreement. A sent statement, the reason it failed and any note or contact details you add are seen only by the MyPDF team, used only to add support for that layout, and deleted once it is supported, and in any case within 30 days.
Your account: what we collect and why
- Account details — your name, email address, the organisation or institution you belong to, and your password, stored only in hashed form. Used to sign you in and contact you about your account.
- Sign-in records — when you signed in, from which IP address and browser. Used to keep your account secure and to investigate suspicious access.
- Conversion log — for each conversion: the date, the bank detected, the number of transactions and whether verification passed. Never the file, the account number, the transactions or any amounts. Used for usage limits, support and improving bank coverage.
- Visitors without an account — to apply the free daily allowance we keep a scrambled (salted hash) form of your IP address with the number of pages converted that day, for 7 days. Conversions without an account are logged with the date, bank, number of transactions and whether verification passed, with nothing that identifies you.
- Your settings — export preferences such as date format and column layout, so they follow you between devices.
- Billing — if you choose a paid plan we record the plan, amount, payment reference, payment method (e.g. EcoCash, InnBucks or card) and the dates paid and active. Payments are processed by ZB Bank (Smile&Pay) or EcoCash; we keep the mobile number you paid from and their transaction reference. Your PIN is entered only on your phone and card details only on ZB Bank’s secure card page — we never see or store your PIN or card details. We email you a receipt for each payment and a reminder before a monthly or yearly plan ends.
- Visit statistics — we count page visits with Umami, which we run on our own server: the page, the referring site, your browser, device type and country, and simple events such as “a statement was converted” (with the bank’s name, never the statement or its contents). No cookies are used.
- Advertising measurement — when we run ads on Facebook or Instagram, our pages also load the Meta Pixel, so Meta can tell us which ads led to sign-ups and payments. It receives the page address and these events only: a page visit, an account created, a plan chosen, a statement converted (with the bank’s name), a file downloaded (with its format) and a payment (with the plan and amount). It is not shown on your account pages, and it never receives a statement or anything in it. Meta handles this under its own privacy policy; you can limit it in your Facebook ad settings or with your browser’s tracking protection.
- Signing in with Google — if you choose “Continue with Google”, Google tells us your name, your email address and that it is verified. We never see your Google password, and we don’t get access to anything else in your Google account.
Cookies and browser storage
If you have an account, a session cookie keeps you signed in. Without an account no cookie is set. Your Light/Dark choice and a copy of your settings are also kept in your browser's local storage. We use no advertising or tracking cookies.
Who else processes data
- Hosting — our service runs on a server in Johannesburg, South Africa (Teraco data centre), provided by our hosting company Domains.co.za. Your account data is stored there.
- Email — sign-in and account emails are sent through an email delivery provider, which receives your email address.
- Fonts — the page's typeface is loaded from Google Fonts, which receives your IP address and browser details when it is downloaded.
We do not sell your data or share it with anyone for marketing.
Using it with NuPay
On the NuPay version of this tool, when you press Import, the verified transactions (not the PDF) are sent to your institution's NuPay account. That data is then handled under NuPay's privacy policy and your institution's agreement with NuClass.
How long we keep it
Account details and settings are kept while your account is open. Sign-in records and the conversion log are kept for 12 months. When you close your account, we delete your account data within 30 days, except where the law requires us to keep billing records.
Your rights
Under Zimbabwe's Cyber and Data Protection Act you can ask to see the personal data we hold about you, have it corrected, or have it deleted, and you can object to how it is used. Contact our Data Protection Officer (details under Contact); we will respond within 30 days.
Changes
If this policy changes, the date at the top will change and signed-in users will be told of material changes. We will not start collecting statement contents without saying so clearly first.
How your data is handled
Statements are read inside your browser and never uploaded automatically to us or anyone else. We keep no copy of your statement, its transactions or the CSV — closing the page clears them. The only exception is a statement that couldn't be converted and that you choose to send us so we can add support for it. Your account holds only your sign-in details, your settings and a short log of conversions (date, bank and number of transactions), never the transactions themselves.
- Processing happens on your device. The converter is a web page that runs in your browser. When you choose a PDF, your browser reads it locally; it is not uploaded.
- Statements are not stored. The statement, its transactions and the CSV exist only in the open page. Refresh or close the tab and they are gone.
- With or without an account. An account knows who you are and how many statements you converted, but not what was in them. Without one, we only count pages for the free daily allowance.
- You can check this yourself. Open your browser's developer tools (Network tab) and convert a statement: no request carries the file or its contents.
- Needs a connection to start. The page checks your daily allowance with our server (page count only) before showing a result.
- Scanned statements aren't supported. Only PDFs with real text (the ones banks generate) can be read. We do not send statements to any OCR or AI service.
- Signing out on shared computers. Sign out when you finish so the next person cannot use your account.
- Downloaded files. CSVs you save stay in your Downloads folder. Delete them when you're done if others use the same computer.
Terms of use
Your account
- You can convert within the free daily allowance without an account. An account keeps your export settings and is needed for paid plans. Give accurate details and keep your password to yourself; you are responsible for activity under your account.
- Accounts are personal. An organisation may have several users, each with their own sign-in.
- Tell us straight away at support@nupay.co.zw if you think someone else has used your account.
- We may suspend an account that is used to break the law, attack the service or get around plan limits.
Using the converter
- Only convert statements you are entitled to access.
- The converter is provided "as is". The built-in verification is designed to catch errors, but you remain responsible for checking figures before relying on them for accounting, tax or legal purposes.
- Supported formats are ZB Bank, CBZ Bank and FBC Bank statement PDFs as currently issued. Banks change their layouts; if a statement does not verify, do not use the output and let us know.
Plans and payment
- The Free plan lets you download the number of statements a day shown on the pricing page, of any length. Further statements that day can be converted and viewed, but not downloaded or copied. Paid plans (Day pass, Monthly and Yearly) remove that limit for the period paid for: 24 hours, a month or a year.
- Paid plans don’t renew automatically: you pay for a day, a month or a year. Payments are made on the site with EcoCash, InnBucks, OneMoney, O’mari, SmileCash or card, through ZB Smile&Pay or EcoCash, and the plan starts as soon as the payment is confirmed. Paying again before it ends adds the new period on from the end date.
- Payments are not refundable once a plan has started, except where the law requires otherwise.
Liability and ownership
- NuClass Pvt Ltd is not liable for losses arising from use of the converter or its output, to the extent the law allows.
- ZB, CBZ and FBC names and logos belong to their respective banks and are shown only to indicate which statement formats are supported. This service is not provided by, or affiliated with, those banks.
- These terms are governed by the laws of Zimbabwe.
How it works
- No account needed to try it. If you sign in, your export settings load with it.
- Drop a statement. The page recognises whether it is a ZB, CBZ or FBC statement from its layout.
- It reads every transaction: dates, description, reference, money in, money out and balance, joining descriptions that wrap over several lines.
- It verifies the result: transactions and amounts are recounted from the PDF a second way, the running balance is rebuilt from the opening balance, and totals are matched to what the bank printed.
- It applies your export settings: date format, column names and order, and making duplicate references unique.
- You download or copy the CSV, ready to import. The statement and its transactions are not kept once you close the page; only a one-line entry (date, bank, number of transactions) is added to your conversion log.
How verification works
Every conversion gets a second, independent pass: row numbers, dates, amounts and balances are counted again straight from the PDF text without the converter's row logic, the running balance is recomputed from the opening balance, totals (and, for CBZ, transaction counts) are compared with the statement's own summary, the CSV that will be saved is re-read and summed, and every reference in it is confirmed unique. A file passes only when every check agrees; anything that does not is shown so you can look at the PDF before importing.
Contact
CompanyNuClass Pvt Ltd (MyPDF)
Address603 Fidelity Building, Cnr 11th Ave and Fife Street, Bulawayo, Zimbabwe
Emailsupport@nupay.co.zw
WhatsApp / phone+263 77 231 8143
Data Protection OfficerTafadzwa Mutasa, via support@nupay.co.zw
Request your bank
We're adding the rest of Zimbabwe's banks and EcoCash statements. Tell us which one you need at support@nupay.co.zw or on WhatsApp, and if you can, attach a sample statement with personal details blacked out. Banks with the most requests are added first.
