Privacy Policy

1. Introduction

Welcome to Cancel Subscriptions ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information with care and respect.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our subscription tracking and cancellation service (the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Communication Data: Messages you send us, feedback, support requests

2.2 Financial Data (via Plaid)

When you connect your bank account through our secure Plaid integration, we collect:

• Bank Account Information: Institution name, account type, account mask (last 4 digits)
• Transaction Data: Transaction history to identify recurring subscription charges
• Merchant Information: Names and categories of merchants for subscription detection

Important: We only have read-only access to your financial data. We never see or store your bank login credentials. All bank connections are handled securely by Plaid, a trusted third-party service used by Venmo, Robinhood, and thousands of other financial apps.

2.3 Automatically Collected Information

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on the Service
• IP Address: For security and fraud prevention
• Cookies: For authentication and preferences (see Section 6)

3. How We Use Your Information

We use the collected information for:

• Service Delivery: Detecting subscriptions, tracking renewal dates, facilitating cancellations
• Account Management: Creating and managing your account, authentication
• Communication: Sending renewal alerts, cancellation confirmations, service updates
• Improvement: Analyzing usage to enhance features and user experience
• Security: Preventing fraud, protecting against malicious activity
• Legal Compliance: Complying with legal obligations and enforcing our terms
• Customer Support: Responding to your questions and resolving issues

4. Data Sharing and Disclosure

4.1 We DO NOT Sell Your Data

We will never sell, rent, or share your financial information with third parties for marketing purposes.

4.2 Service Providers We Share With

We share your information only with trusted service providers who help us operate the Service:

• Plaid: Secure bank account connections and transaction data retrieval
• Clerk: Authentication and user management
• Stripe: Payment processing for premium subscriptions
• Resend: Transactional email delivery (renewal alerts, confirmations)
• Vercel: Web hosting and infrastructure
• Railway: Database hosting

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, your safety, or the safety of others.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted is encrypted using TLS/SSL (HTTPS)
• Database Security: Financial data encrypted at rest using AES-256 encryption
• Access Controls: Strict internal access policies, multi-factor authentication for our team
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: Hosted on enterprise-grade cloud platforms

Note: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication: Keeping you logged in securely
• Preferences: Remembering your settings and choices
• Analytics: Understanding how you use the Service (via Vercel Analytics)
• Security: Detecting fraudulent activity

You can control cookies through your browser settings, but disabling them may limit functionality.

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Access and Portability

You can access and download your data at any time through your account dashboard.

7.2 Correction

Update your account information anytime in your settings.

7.3 Deletion

You can delete your account and all associated data at any time. Go to Settings → Account → Delete Account. This action is permanent and cannot be undone.

7.4 Opt-Out of Communications

Unsubscribe from marketing emails via the link in any email, or manage preferences in your account settings. Note: We will still send transactional emails (renewal alerts, cancellation confirmations) necessary for the Service.

7.5 California Privacy Rights (CCPA)

California residents have additional rights under CCPA, including the right to know what personal information is collected, request deletion, and opt-out of sale (though we do not sell data).

7.6 European Privacy Rights (GDPR)

EU/EEA residents have rights under GDPR, including data portability, right to be forgotten, and right to object to processing.

8. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide the Service
• Required by law (e.g., tax records, fraud prevention)

When you delete your account, we permanently delete your financial data within 30 days. Some information may be retained in backups for up to 90 days for disaster recovery purposes.

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice in the Service

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: