Privacy Policy
Your privacy is paramount. This policy explains how we collect, use, and protect your personal information in compliance with GDPR and other privacy regulations.
Bank-Grade Security
256-bit encryption protects all your data
GDPR Compliant
Full compliance with EU data protection laws
Transparent
Clear information about data usage
1. Information We Collect
Personal Information
- • Email address (for account creation and communication)
- • Name (optional, for personalization)
- • IP address (for security and analytics)
- • Browser and device information (for compatibility)
Financial Data
- • Bank account information (via secure Plaid/BankID integration)
- • Transaction data (to identify subscriptions)
- • Subscription information (amounts, frequencies, merchants)
Important: We never store your banking credentials. All financial data access is handled through secure, regulated third-party providers (Plaid, BankID).
2. How We Use Your Information
Primary Uses
- • Subscription Detection: Analyze transactions to identify recurring charges
- • Service Provision: Provide cancellation guidance and subscription management
- • Account Management: Maintain your account and preferences
- • Communication: Send service updates and important notifications
Analytics & Improvement
- • Improve our AI algorithms for better subscription detection
- • Analyze usage patterns to enhance user experience
- • Generate anonymized insights about subscription trends
3. Your GDPR Rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Portability
Request transfer of your data to another service
To exercise your rights: Contact us at johnmessoa@gmail.com with your request. We will respond within 30 days.
4. Data Sharing & Third Parties
We Share Data With:
- • Plaid & BankID: Secure financial data providers (GDPR compliant)
- • Cloud Providers: AWS/Google Cloud for secure data storage
- • Analytics: Google Analytics (anonymized data only)
We Never Share:
- • Personal data with advertisers
- • Financial data with unauthorized parties
- • Data for marketing purposes without consent
5. Data Retention
- • Account Data: Retained while your account is active
- • Transaction Data: Retained for 2 years for service improvement
- • Analytics Data: Anonymized and retained for 3 years
- • Deleted Accounts: All data permanently deleted within 30 days
Contact Our Data Protection Officer
For any privacy-related questions or to exercise your GDPR rights:
We aim to respond to all privacy inquiries within 72 hours and fulfill GDPR requests within 30 days.