Security & Privacy

Learn how Subres protects your data.

Data Security

Encryption

  • In Transit - TLS 1.3 for all connections
  • At Rest - AES-256 encryption for stored data
  • Email Content - We don't store full email content
  • Infrastructure

  • Hosted on secure cloud infrastructure
  • Regular security audits
  • SOC 2 Type II compliance (in progress)
  • Privacy Practices

    What We Collect

  • Email metadata for subscription detection
  • Subscription details (name, cost, dates)
  • Usage analytics (anonymized)
  • What We Don't Collect

  • Full email content or attachments
  • Personal messages
  • Contacts or calendar data
  • Your Rights

    Under GDPR and CCPA, you have the right to:

  • Access - Download all your data
  • Rectify - Correct inaccurate information
  • Delete - Remove your account and data
  • Port - Export data in standard formats
  • Compliance

  • GDPR - Compliant for EU users
  • CCPA - Compliant for California residents
  • HIPAA - Not applicable (we don't handle health data)
  • Reporting Issues

    Found a security vulnerability? Email us at security@subres.io. We respond within 24 hours.

    Documentation - Subres