Privacy Policy

1. Who we are

Unsubbd ("we", "us") is an independent beta project based in California, USA. We run the website at unsubbd.com and the subscription tracking service offered there (the "Service"). This policy explains what information we collect, why, and the choices you have. Questions go to support@unsubbd.com.

2. Information we collect

• Account information. Your first and last name and your email address. You sign in with a password or with Google. Passwords are stored only in hashed form by our sign-in provider, so we cannot read them. When you create an account we email you a one-time code to confirm your address. If you use Google, we receive your name and email address from Google and no password is needed. Your full email address is held only by our sign-in provider; elsewhere in our database we keep a masked version.
• Profile details. Your year of birth and your state, province or region, which we ask for when you set up your account. We ask for the year only, never a full date of birth.
• Subscription information you enter. The names, prices, billing cycles, categories, renewal dates, usage ratings and notes for subscriptions you add or import, and a record of subscriptions you mark as cancelled.
• Files you upload. If you upload a card or bank statement, we read it on our server to find recurring charges. We keep the file name, the number of rows and the recurring charges we detected. We do not keep the file itself or your other transactions. If you upload a list of subscriptions, we store the rows as subscriptions.
• Bank information, if you connect a bank. See section 4.
• Technical information. Our hosting and database providers log standard request data such as IP address, browser type and time of request, for security and troubleshooting.
• Consent records. The date and version of the terms you accepted.
• Cancellation records. When you use "Cancel before next bill" we record the question you were asked, your answer, the date and time, your email address, the subscription concerned, your IP address and browser type, and whether our email was sent. We also record your later answer on whether the subscription stayed inactive, and what a statement or bank connection showed about it. These records exist so that you and we can show what was requested and when, and they cannot be edited.

3. How we use information

• To provide the Service: show your subscriptions, totals, renewals and savings.
• To detect recurring charges in data you upload or connect.
• To generate recommendations and draft messages when you use AI features.
• To secure accounts, prevent abuse and fix problems.
• To understand how the Service is used in aggregate. We group accounts into broad segments: age band and generation (from your year of birth), state or region, the month you joined, and subscription category. For each segment we look at how many accounts it holds and how much subscription spending those accounts track. These reports show totals only, never an individual's records, and a segment with fewer than 5 accounts is merged with others or hidden. We do not use these segments to change what you personally see in the Service.
• To email a subscription provider on your behalf when you confirm a cancellation and the provider accepts requests by email. That message contains your name, your email address and the subscription name, and you are copied on it.
• To contact you about your account, such as confirmation and password reset codes.

4. Bank connections and Plaid

Connecting a bank is optional. We use Plaid Inc. ("Plaid") to connect your account. You enter your bank credentials in Plaid's window; we never receive or store your bank username or password.

When you connect a bank, we receive from Plaid the name of your institution, an access token for that connection, and information about recurring transactions such as merchant name, amount, frequency, category and dates. We store the access token in encrypted form and use it only to retrieve recurring charges when you ask us to scan. You can disconnect a bank at any time in the app, which removes the connection from our records and asks Plaid to revoke it.

By connecting a bank you grant us and Plaid the right, power and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored and processed by Plaid in accordance with the Plaid End User Privacy Policy.

5. AI features

If you use AI recommendations or ask us to draft a cancellation email, we send the relevant subscription details (such as name, category, price, billing cycle and your usage rating) to an AI model provider to generate the response. We do not send your email address, password or bank credentials. AI output can be wrong; treat it as a suggestion.

6. How we share information

We do not sell your personal information. We share it only with:

• Service providers that run the Service for us: Supabase (database and sign-in), Cloudflare (hosting and network), Resend (sending email), Plaid (bank connections, if you use them) and an AI model provider (if you use AI features).
• A subscription provider, only when you confirm a cancellation and we email them your request as described in section 3.
• Authorities or others when required by law, or to protect the rights and safety of our users and the Service.
• A successor if the Service is involved in a merger, acquisition or sale of assets, subject to this policy.

7. Cookies and browser storage

We use your browser's storage only for things the Service needs to work, such as keeping you signed in. We do not use advertising or cross-site tracking cookies. If that changes, we will update this policy and ask for consent where the law requires it.

8. Retention and deletion

We keep your information while your account is open. To delete your account and the data linked to it, email support@unsubbd.com from the address on your account. We will delete it within 30 days, except for records we must keep by law, cancellation records, and a minimal record that the account existed and was closed (name, masked email and dates). If we close your account ourselves, we email you first and delete the account no sooner than 30 days later. Provider backups and logs expire on their own schedules.

9. Security

Data is encrypted in transit. Each user's records are isolated so that one account cannot read another's, and bank access tokens are encrypted before they are stored. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your choices and rights

• You can edit or delete subscriptions, and disconnect banks, in the app.
• You can ask for a copy of your data, a correction, or deletion by emailing support@unsubbd.com.
• Depending on where you live (for example California, or India under the Digital Personal Data Protection Act), you may have additional rights, including the right to withdraw consent and to raise a complaint. Contact us and we will respond within the time the law requires.

11. Children

The Service is for adults. You must be at least 18 to use it, and we do not knowingly collect information from anyone under 18.

12. Where data is processed

Our database is hosted in the United States, and our providers may process data in other countries. By using the Service you understand that your information will be processed in the United States.

13. Changes to this policy

If we make material changes we will update the effective date above and ask you to accept the new version the next time you sign in.

14. Contact

Unsubbd — support@unsubbd.com