Is it safe to upload a bank statement to ChatGPT?

Uploading a bank statement to ChatGPT is safe once you delete the account number and your personal details from the file and keep the chat out of OpenAI’s model training.

What ChatGPT can read in a bank statement PDF or CSV

A PDF statement opens with a header page that prints your name and account number. The rows below it name every merchant and the people you sent transfers to, and many statements add a running balance after each line.

A CSV export from online banking is usually leaner, but its description column can still hold card endings and payment references. Attach either file and the assistant reads all of it, not only the rows you care about.

What to remove before you upload a statement

An expense import needs only each row’s date, description and amount, so the rest can go:

• Account and bank codes: the account number or IBAN (its international form), plus the routing or sort code that identifies your bank. Delete them, or keep the last four digits of the account number to tell two accounts apart.
• The header with your name and address.
• Pages that are not transactions, such as summaries and interest notices.
• The balance column. It shows how much money you held on each day, and tracking spending does not need it.
• Notes on personal transfers that say more than you want written anywhere, like a rent reference with a full street address.
• Other accounts the bank bundled into the same document.

A CSV is the easier file to clean: open it in Numbers or Excel, delete the columns you do not want and export it again. If your bank offers both formats, the CSV saves time.

Does ChatGPT keep or train on the files you upload?

A statement you attach is part of the chat, so OpenAI’s chat rules cover it. On personal ChatGPT plans (Free, Plus and Pro), conversations can be used to train OpenAI’s models by default. Switching off Improve the model for everyone under Settings > Data controls keeps new chats out of training, though they still appear in your history. A Temporary chat skips both history and training, and OpenAI may still hold it for up to 30 days for safety reasons. Rating a reply with a thumbs up or down can send that whole conversation for training even after you opt out. OpenAI sets this out on its Data controls in ChatGPT page, checked on October 25, 2026.

Is uploading a statement safer than linking your bank account?

Linking a bank gives an app a standing login to your account that keeps pulling in new activity. A statement file is a fixed record of the past, so it cannot move money or fetch new purchases.

Manilo never asks for bank credentials and does not connect to any bank. Once connected, ChatGPT pulls only the records a question calls for, never your whole ledger, as Privacy and your data explains.

Importing the trimmed statement into an expense tracker

With Manilo connected, attach the trimmed statement and ask for an import in your own words: each row goes under one of your existing categories in a single batch, and the reply links to the web dashboard so you can check the new rows. Import a statement by chat has the steps.

Chat import is part of Manilo Cloud, the paid plan, which starts with a 7-day free trial.

How to revoke ChatGPT’s access and delete the statement

Disconnecting Manilo in ChatGPT’s settings ends its access straight away, and Connect ChatGPT shows where to find it. If you wanted a single import, disconnect as soon as it finishes; the imported rows stay in Manilo. Delete the chat in ChatGPT to take the statement out of your history.

To clear the Manilo side too, delete your account under Settings > Account > Delete Account in the app: your data leaves Manilo’s servers at once and backups expire within 30 days, as the privacy policy describes.