Privacy Policy

1. Introduction

Welcome to SubWise ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our subscription tracking service (the "Service").

By using SubWise, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Create an account with SubWise
• Add subscription information to your account
• Contact our customer support
• Subscribe to our newsletter or marketing communications
• Participate in surveys or feedback forms

2.2 Subscription Data

To provide our core service, we collect and process:

• Subscription service names and categories
• Subscription costs and billing cycles
• Renewal dates and payment schedules
• Currency preferences
• Custom categories and tags you create

2.3 Usage Information

We automatically collect certain information when you use our Service:

• Device information (device type, operating system, browser type)
• IP address and approximate location
• Usage patterns and feature interactions
• Log data (access times, pages viewed, errors encountered)

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our subscription tracking services
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Notifications: To send renewal reminders, spending alerts, and important service updates
• Analytics: To analyze usage patterns and improve our service features
• Communication: To respond to your inquiries and provide customer support
• Legal Compliance: To comply with legal obligations and protect our rights
• Marketing: To send promotional communications (with your consent)

4. Email Integrations (Gmail)

If you choose to connect your Gmail account, SubWise uses Google’s OAuth 2.0 flow to request read-only access to specific subscription-related emails, such as receipts, invoices, and billing notifications. We do not read or store the content of your personal emails.

From these subscription-related emails we extract structured data such as merchant name, service name, transaction amount, billing currency, billing cadence, and relevant dates (for example, renewal dates). We store this structured data in order to power features like automatic subscription detection, price change tracking, and renewal reminders.

You can disconnect Gmail at any time from within your account settings. Disconnecting stops all future scans. You may also delete your SubWise account, in which case the structured data derived from your Gmail messages will be deleted or anonymized in line with our data retention policy described above.

SubWise does not use Gmail data for advertising, does not sell your Gmail data to third parties, and does not allow any human access to Gmail message content except where required for security, support, or legal compliance. Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Payment Processing: Stripe and Clerk (secure payment processing and subscription management)
• Authentication: Clerk (user authentication and management)
• Database: Convex (data storage and processing)
• Email Services: Resend (notification delivery)
• Analytics: Service providers for usage analytics and performance monitoring
• Hosting: Vercel (application hosting and deployment)

Important: We do not store your full credit card information. Payment data is handled directly by Stripe in compliance with PCI-DSS standards.

4.2 Legal Requirements

We may disclose your information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations or court orders
• Protect and defend our rights or property
• Prevent fraud or security threats
• Protect the safety of our users or the public

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice of any such change in ownership or control.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmission is encrypted using TLS/SSL protocols
• Access Controls: Strict access controls and authentication measures
• Data Minimization: We collect only the information necessary to provide our services
• Regular Security Audits: Ongoing monitoring and security assessments
• Secure Infrastructure: Use of reputable cloud providers with security certifications

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Withdrawal of Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic functionality and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our service
• Authentication Cookies: Maintain your logged-in session

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our Service.

8. Data Retention

We retain your personal information only as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 30 days, except where longer retention is required by law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data.

10. Children's Privacy

SubWise is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for material changes

Your continued use of SubWise after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

For data protection inquiries specifically, please include "Privacy Request" in your email subject line to ensure prompt handling.