PRIVACY · DEVELOPMENT EDITION

Your email, with purpose.

Substrack accesses Gmail only after you authorize a connection. Read-only access is used to discover subscription billing evidence, recurring payments, renewals, and cancellation notices.

What we retain

Normalized subscription and payment records, Gmail message identifiers, limited billing evidence summaries, scan coverage, and encrypted OAuth tokens. Full email bodies are processed temporarily and are not stored by default.

AI processing

Ambiguous candidate billing messages may be sent to OpenAI for structured extraction. Unrelated personal emails are filtered before AI processing. API requests disable application response storage. Provider processing and retention policies still apply. Gmail data is not used for advertising or unrelated profiling.

Your controls

Disconnect individual accounts in Accounts. Delete imported data and stored tokens in Settings. You can also revoke the application in Google Account permissions. Disconnecting retains discovered payment history until you delete it.

Development and public launch

This development application is not represented as Google-verified or security-certified. Before a public launch, the operator must complete applicable Google OAuth verification, security assessment, privacy disclosures, retention and support arrangements.

This policy describes the development implementation. Operator identity, support contact, and production retention terms must be completed before public launch.