Privacy Policy

1. Introduction

SubSleuth ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our subscription management service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Company/organization name
• Profile picture (if using Google OAuth)

2.2 Financial Transaction Data

To provide our subscription tracking service, we process financial transaction data that you upload, including:

• Transaction descriptions and vendor names
• Transaction amounts and dates
• Category classifications
• Subscription metadata (renewal dates, billing cycles)

Important: We recommend removing or redacting any personally identifiable information (PII) from CSV files before uploading. We do not collect credit card numbers, bank account numbers, or other payment credentials through our CSV import feature.

2.3 Usage Information

We automatically collect certain information when you use our service:

• Log data (IP address, browser type, pages visited)
• Device information
• Analytics data about how you use our features

2.4 Payment Information

When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card details. We receive and store:

• Last four digits of your card
• Card expiration date
• Billing address
• Stripe customer ID

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our service
• Analyze your subscription data to identify savings opportunities
• Send renewal alerts and notifications
• Process your payments
• Respond to your requests and support inquiries
• Send service-related communications
• Detect and prevent fraud or abuse

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.

Uploaded CSV data and subscription records are stored for the duration of your account. You may request deletion of specific data at any time.

5. Data Sharing

We do not sell your data. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who help us operate our service (e.g., Stripe for payments, Resend for emails, Neon for database hosting)
• Team Members: With other members of your organization who have been granted access
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS/SSL
• Database connections are encrypted
• Access to production systems is restricted and logged
• We use secure authentication (OAuth, magic links)

While we take reasonable steps to protect your information, no method of transmission over the Internet is 100% secure.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Export: Request your data in a portable format
• Objection: Object to certain processing activities

To exercise these rights, contact us at privacy@subsleuth.com.

8. Third-Party Services

Our service integrates with third-party services:

• Stripe: Payment processing (Privacy Policy)
• Google: OAuth authentication (Privacy Policy)
• Slack: Alert notifications (optional integration)

9. Cookies

We use essential cookies to maintain your session and provide the service. We do not use third-party tracking cookies for advertising purposes.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@subsleuth.com