Privacy Policy

1. Who we are

Unsubbd ("we", "us") runs the website at unsubbd.com and the subscription tracking service offered there (the "Service"). This policy explains what information we collect, why, and the choices you have. Questions go to support@unsubbd.com.

2. Information we collect

• Account information. Your email address and a password, which is stored only in hashed form by our authentication provider.
• Subscription information you enter. The names, prices, billing cycles, categories, renewal dates, usage ratings and notes for subscriptions you add or import, and a record of subscriptions you mark as cancelled.
• Files you upload. If you upload a card or bank statement, we read it on our server to find recurring charges. We keep the file name, the number of rows and the recurring charges we detected. We do not keep the file itself or your other transactions. If you upload a list of subscriptions, we store the rows as subscriptions.
• Bank information, if you connect a bank. See section 4.
• Technical information. Our hosting and database providers log standard request data such as IP address, browser type and time of request, for security and troubleshooting.
• Consent records. The date and version of the terms you accepted.

3. How we use information

• To provide the Service: show your subscriptions, totals, renewals and savings.
• To detect recurring charges in data you upload or connect.
• To generate recommendations and draft messages when you use AI features.
• To secure accounts, prevent abuse and fix problems.
• To understand how the Service is used in aggregate. Our internal reporting uses counts and totals, not individual records.
• To contact you about your account, such as confirmation and password emails.

4. Bank connections and Plaid

Connecting a bank is optional. We use Plaid Inc. ("Plaid") to connect your account. You enter your bank credentials in Plaid's window; we never receive or store your bank username or password.

When you connect a bank, we receive from Plaid the name of your institution, an access token for that connection, and information about recurring transactions such as merchant name, amount, frequency, category and dates. We store the access token in encrypted form and use it only to retrieve recurring charges when you ask us to scan. You can disconnect a bank at any time in the app, which removes the connection from our records and asks Plaid to revoke it.

By connecting a bank you grant us and Plaid the right, power and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored and processed by Plaid in accordance with the Plaid End User Privacy Policy.

5. AI features

If you use AI recommendations or ask us to draft a cancellation email, we send the relevant subscription details (such as name, category, price, billing cycle and your usage rating) to an AI model provider to generate the response. We do not send your email address, password or bank credentials. AI output can be wrong; treat it as a suggestion.

6. How we share information

We do not sell your personal information. We share it only with:

• Service providers that run the Service for us: Supabase (database and sign-in), Cloudflare (hosting and network), Plaid (bank connections, if you use them) and an AI model provider (if you use AI features).
• Authorities or others when required by law, or to protect the rights and safety of our users and the Service.
• A successor if the Service is involved in a merger, acquisition or sale of assets, subject to this policy.

7. Cookies and browser storage

We use your browser's storage only for things the Service needs to work, such as keeping you signed in. We do not use advertising or cross-site tracking cookies. If that changes, we will update this policy and ask for consent where the law requires it.

8. Retention and deletion

We keep your information while your account is open. To delete your account and the data linked to it, email support@unsubbd.com from the address on your account. We will delete it within 30 days, except for records we must keep by law. Provider backups and logs expire on their own schedules.

9. Security

Data is encrypted in transit. Each user's records are isolated so that one account cannot read another's, and bank access tokens are encrypted before they are stored. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your choices and rights

• You can edit or delete subscriptions, and disconnect banks, in the app.
• You can ask for a copy of your data, a correction, or deletion by emailing support@unsubbd.com.
• Depending on where you live (for example California, or India under the Digital Personal Data Protection Act), you may have additional rights, including the right to withdraw consent and to raise a complaint. Contact us and we will respond within the time the law requires.

11. Children

The Service is for adults. You must be at least 18 to use it, and we do not knowingly collect information from anyone under 18.

12. Where data is processed

Our database is hosted in the United States, and our providers may process data in other countries. By using the Service you understand that your information will be processed in the United States.

13. Changes to this policy

If we make material changes we will update the effective date above and ask you to accept the new version the next time you sign in.

14. Contact

Unsubbd — support@unsubbd.com