Sure... If the OFX/CSV we upload is encrypted before we upload it, how can you process it ("Leave the rest to us"). Conversely, if you are processing the OFX/CSV, how can you not peek into it?
Oh, I see.
OFX/CSV files are processed on the client-side, and we never get the raw file, only the processed and encrypted transactions. Does that make sense?
Ooooh, I get it! “Upload” is a bad word for that. Will change it to something else, thanks!
Yup, I think that's where the mental conflict comes from. How about "import"?
I don't think any word will do it justice. I would spell out that it's done client-side and what information is/isn't uploaded.