Privacy policy
Last updated 20 October 2026
The short version. Your payees’ bank details never reach us — conversion happens inside your browser. We collect anonymous page statistics, we run Google ads and so we measure which ads bring people here, and we hold your email only if you give it to us.
1. The short version
The payment details you convert — BSBs, account numbers, payee names, amounts — never reach us. They are read and converted inside your browser and handed straight back to you. There is no upload, and no copy of them on any server of ours.
What we do collect is small: anonymous page statistics, advertising measurement data if you arrived from one of our ads, and your email address if you choose to give it to us.
2. Who we are
ABAConvert is operated by Arva Industries Pty Ltd (ABN 56 702 661 247), trading as ABA Convert. For privacy matters write to privacy@abaconvert.com.au; for help with the service, support@abaconvert.com.au.
3. Payment and payee data
When you convert a spreadsheet, the file is read by code running in your browser tab. The conversion happens there and the resulting ABA file is saved directly to your device. At no point is the file, or anything in it, transmitted to us or to anyone else.
We therefore do not hold, and cannot produce, any record of who you pay or what you pay them. You can confirm this for yourself: load the page, disconnect from the internet, and convert a file anyway. It still works.
4. What we do collect
- Anonymous usage statistics. We use a privacy-preserving analytics tool (Plausible) that records page views and referrers without cookies and without building a profile of you. We cannot identify you from it. We also count a handful of actions — that a file was loaded, converted, downloaded or checked — along with a rough size band such as “11–50 payments” and which bank was selected. These are counts only. No BSB, account number, payee name, amount, file name or file content is ever included, and nothing in them identifies you or anyone you pay.
- Advertising measurement, through Google. We advertise ABAConvert on Google. To know which ads are worth paying for, this site loads Google's advertising tag (gtag.js) on every page. It tells Google that a visit, and in some cases an action such as downloading a file, followed a click on one of our ads. Google receives your IP address, the pages you viewed on this site, and the click identifier from the ad. It does not receive any payment data. We never attach a BSB, account number, payee name, amount, file name or file content to anything sent to Google, and the site is built so that it cannot: that data is never available outside your browser tab in the first place.
- Cookies set by the Google tag. Unlike our analytics, the Google tag does set cookies in your browser — principally _gcl_au, which records that you arrived from an ad so that a later action can be attributed to it. You can refuse or delete these at any time through your browser settings, or opt out of personalised Google advertising at myadcenter.google.com. The converter works exactly the same either way; nothing on this site requires a cookie to function.
- Your email address, if you give it. If you join the waitlist or write to us, we keep your address and anything you tell us, so we can reply and let you know when plans open.
- Standard server logs held briefly by our hosting provider, including IP address, for security and abuse prevention.
5. Information stored in your own browser
The site may save your file settings — your bank, your business name, your own BSB and account number — in your browser's local storage, so you do not have to type them again next time. This stays on your device, is not sent to us, and you can clear it at any time by clearing site data in your browser.
6. How we use what we collect
To run and improve the site, to reply to you, and to tell you about ABAConvert.
We do not sell personal information. We do use it for advertising in one specific sense: as described in section 4, information about your visit is shared with Google so we can measure which of our ads bring people here and, where you have not opted out, so that Google may show you our ads again elsewhere. We do not provide anyone's email address, or any payment data, to Google or to any other advertising platform.
7. Who else can see it
Our hosting, analytics and advertising providers process data on our behalf under their own terms and security obligations. Those providers are currently Cloudflare (hosting), Plausible Analytics (usage statistics) and Google (advertising measurement). Some are located outside Australia, which means information they hold may be stored or processed overseas, including in the United States. We do not disclose personal information to anyone else except where required by law.
8. How long we keep it
Email addresses until you ask us to remove them or we no longer need them. Analytics in aggregate form. Advertising data for the period set by Google, which you can review and clear through your Google account. Server logs for a short period set by our host.
9. Security
The site is served over HTTPS. The most meaningful security measure is architectural rather than procedural: because your payment data never leaves your device, there is no store of it for anyone to breach, subpoena or steal.
10. Your rights
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@abaconvert.com.au and we will respond within a reasonable time, and within 30 days at the outside.
If you are unhappy with how we have handled your information, tell us first and we will try to fix it. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
11. Changes
We may update this policy. The date at the top shows when it last changed. If we ever start handling payment data differently from what is described here, we will say so prominently before the change takes effect.