Last updated October 1, 2026
Privacy policy
Short version: your invoice PDFs never leave your device. LineItemCSV reads them inside your browser and we never receive, store or see their contents.
Who we are
LineItemCSV is operated by Carrasco Inc. (“we”, “us”). This policy explains what information is processed when you use the LineItemCSV website and converter.
Your PDFs and their contents
- When you choose or drop a PDF, it is opened in your browser's memory and parsed with pdf.js, an open-source PDF library that runs on your device.
- The PDF and the extracted data (vendors, line items, amounts and so on) are not uploaded to our servers, not stored by us, and not shared with anyone.
- The CSV or Excel file you download is generated locally in your browser. Closing or refreshing the tab clears everything from memory.
- The sample invoices are static files served from our website and contain fictional data.
The usage cookie
To enforce the free tier and remember a paid plan without accounts, we set one first-party cookie (licsv_quota). It contains only counters: how many free conversions you've used, how many purchased credits remain and, for the monthly plan, when unlimited access ends. It is cryptographically signed so it can't be edited, and it contains nothing about your documents.
When you start a checkout we also set a short-lived cookie (licsv_checkout) recording which plan you chose, so the plan can be applied when Stripe sends you back. It expires within 24 hours and is deleted once used.
Each time a conversion succeeds, your browser makes a request to update the counter. That request contains no file data.
Payments
Paid plans are purchased through Stripe Payment Links. Stripe collects and processes your payment details and email address under the Stripe Privacy Policy. We receive the transaction record Stripe provides to merchants (such as name, email, amount and date) and use it only to provide the service, support you and meet legal and accounting obligations. We never see your full card number.
Hosting and logs
Our hosting provider may keep standard, short-lived server logs (IP address, user agent, requested page) to operate and secure the website. These logs never include your PDFs or their contents, because those are never sent to us.
What we don't do
- No advertising or cross-site tracking cookies.
- No selling or renting of personal information.
- No training of AI models on your documents — we never have them.
Your choices and rights
You can delete the usage cookie at any time in your browser settings (this resets your free counter and removes any plan stored in that browser). For questions about payment records, or to exercise privacy rights available to you under laws such as the GDPR or CCPA, reply to your Stripe receipt or contact us through the details on it.
Changes
If we change how data is handled — for example, if we ever add optional cloud features — we will update this page and the date above before the change takes effect. Browser-only processing will remain the default.