Privacy Policy

Information Gathering and Usage

When registering for Subs, we ask for your email address and capture timezone information. Your email address is used to create and manage your Subs account, which is handled through our authentication provider, Auth0, and to send you important service-related communications. Your timezone information helps us tailor notification timing.

To use our Service, you will also provide details about your subscriptions, such as service names, renewal dates, and costs (“Subscription Data”). This Subscription Data is assigned to your account and is essential for us to provide you with reminder notifications.

We only collect personal data that is necessary to provide our services, and we only store it for as long as it is necessary to deliver these services. Email communications, including reminder notifications and account-related messages, are delivered using Resend.

If you contact us directly (e.g., via email for support), we will collect your email address and any other information you choose to provide in your communication to assist you.

Subs may also collect aggregated and anonymized user data related to Service usage. This data does not personally identify you and is used to improve Subs and the quality of our service.

Your Data

Subs uses third-party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run Subs. These include:

• Supabase: For secure database hosting to store your account information (email, timezone) and the Subscription Data you provide.
• DigitalOcean: Our website and application are hosted on DigitalOcean, which provides the underlying infrastructure for our service.
• Cloudflare: We utilize Cloudflare for content delivery network services to enhance website performance and for security services, including protection against certain online threats.
• Auth0: For secure user authentication services, including account creation, login, and password management, using your email address.
• Resend: For the delivery of email communications from our Service to you, using your email address.
• Stripe: For secure processing of payments. We do not store your full payment card details on our servers. Your email address may be shared with Stripe for receipt and payment confirmation purposes.

Although Subs owns the code, databases, and all rights to the Subs application, you retain all rights to your personal data (including your email, timezone, and Subscription Data) that you provide to us.

We will never sell your personal data to third parties. Your data is processed and stored by us and our trusted third-party vendors, which may involve data being stored or processed in Australia, the United States, and other countries where these vendors operate. We take steps to ensure that any international transfer of information is managed to protect your rights and interests.

Cookies

We use cookies to store visitor preferences and customize web page content based on visitors' browser type or other information that the visitor sends. Cookies, or similar browser storage technologies, are required for certain functionalities of Subs, such as keeping you logged in (via Auth0) and remembering your preferences. You can manage your cookie preferences through your browser settings, but disabling essential cookies may affect your ability to use our Service.

Security

We are committed to protecting the security of your personal information. We implement appropriate technical and organizational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. For example:

• Auth0: User authentication is handled by Auth0, a specialized identity management platform.
• Supabase: Database services are provided by Supabase, which offers robust security features for data storage.
• DigitalOcean & Cloudflare: Our infrastructure is hosted with DigitalOcean, and we benefit from security measures provided by Cloudflare.
• Stripe: Payment processing is handled by Stripe, which is certified to PCI Service Provider Level 1, the most stringent level of certification available in the payments industry.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.

Changes

If our information practices change in the future, we will post the policy changes to our website to notify you of these changes, and the "Last Updated" date at the top of this Privacy Policy will be revised. We will use for these new purposes only data collected from the time of the policy change forward, or as otherwise permitted by law. We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices.