Privacy Policy

Information We Collect

Account Information

When you create an account, we may collect:

• •Name
• •Email address
• •Profile information
• •Authentication identifiers

Google Account and Gmail Data

If you choose to connect your Google account, Subres uses Google’s secure OAuth authorization system to request access.

Depending on permissions you approve, Subres may access:

• •Gmail metadata (sender, subject, timestamps)
• •Read-only email message content necessary to identify receipts, invoices, and subscription confirmations

How We Use Information

We use collected information solely to:

• •Detect subscriptions and recurring payments
• •Analyze receipts and billing confirmations
• •Provide dashboards and insights
• •Improve system performance and security
• •Comply with legal obligations

We do not use Gmail data for advertising or unrelated analytics.

Google API Services User Data Policy Compliance

Subres’ use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• •Google user data is used only to provide or improve user-facing features within Subres.
• •Google user data is never sold.
• •Google user data is never used for advertising, marketing profiling, or data brokerage.
• •Google user data is never used to train artificial intelligence or machine learning models.
• •Human access to Gmail data is restricted and only permitted for security, debugging, or legal compliance when strictly necessary.

OAuth Authorization and User Control

Access to Google data occurs only after explicit consent via Google’s OAuth flow.

Users maintain full control and may revoke access at any time by:

• •Disconnecting Google within their Subres account settings, or
• •Removing Subres from Google Account Security permissions.

Once access is revoked:

• •Subres immediately stops processing Gmail data.
• •Stored tokens are revoked or securely deleted.

Data Sharing

We do not sell personal information.

Limited information may be shared only with trusted infrastructure providers required to operate Subres, such as:

• •Secure cloud hosting
• •Authentication services
• •Security monitoring systems

These providers process data only under strict contractual obligations.

Data Retention and Deletion

We retain data only for as long as necessary to provide Subres services.

When a user disconnects Google or deletes their Subres account, we:

• •Stop processing Gmail data
• •Remove or anonymize stored data according to our retention policies
• •Revoke stored OAuth credentials

Users may request deletion at: support@subres.io

For full data deletion instructions, including how to disconnect Google and delete your account, visit our Data Deletion Instructions page.

Security Measures

We implement industry-standard safeguards including:

• •Encryption in transit
• •Secure OAuth token storage
• •Access controls and audit logging
• •Principle of least privilege access

Subres is designed to minimize exposure of sensitive email content.

International Transfers

Data may be processed in secure cloud infrastructure outside your country. We apply appropriate safeguards to protect information.

Your Rights

Depending on your location, you may:

• •Request access to your data
• •Request deletion
• •Withdraw consent for integrations

Contact: support@subres.io

Changes to This Policy

We may update this Privacy Policy as Subres evolves. Updates will be published on this page.

Contact