Privacy Policy
Your privacy is central to how we build Subman. This policy explains what data we collect, why we collect it, and how you stay in control of your information.
Last updated: January 2025
1. Information We Collect
When you create an account, we collect your email address and encrypted password. Optional details — such as your name or timezone — help personalize your experience.
When you add subscriptions, we store only the details you provide (like service name, billing frequency, and cost). Uploaded PDFs are processed automatically and permanently deleted within 24 hours of extraction.
We also collect limited, anonymized analytics (e.g., page views and feature usage) to improve the product experience. This data cannot identify individual users.
2. How We Use Your Information
- Operate and maintain your Subman account
- Provide subscription tracking, reminders, and insights
- Improve product performance and reliability
- Respond to support requests and send critical service updates
3. PDF Uploads and Data Processing
When you upload a PDF, Subman uses secure, encrypted processing powered by Amazon Textract. The file is temporarily stored to extract subscription details, then automatically and permanently deleted within 24 hours. Only the extracted information you confirm is saved to your account.
4. Data Security
We use industry-standard security measures to protect your information:
- 256-bit AES encryption for stored data
- TLS 1.3 encryption for all network communications
- Optional two-factor authentication for enhanced security
- Regular security audits and access monitoring
While no system can be 100% secure, we continuously review and improve our practices to safeguard your data.
5. Data Retention
Your account data remains stored as long as your account is active. You can delete your account at any time, which removes all personal data and subscription records from our systems within 30 days.
Backup copies used for disaster recovery are securely deleted within 90 days of account removal.
6. Your Rights and Control
You are always in control of your data. You can:
- View or export your stored data
- Update or correct your personal details
- Delete your account and all related data
- Opt out of non-essential emails and analytics
To exercise any of these rights, contact us at privacy@subman.app.
7. Third-Party Services
Subman uses trusted third-party providers for essential services like cloud storage, authentication, and analytics. These providers are carefully selected and comply with international data protection standards, including GDPR and CCPA where applicable.
8. Policy Updates
We may occasionally update this Privacy Policy to reflect new features, legal requirements, or improvements in our practices. Significant changes will be announced through in-app notifications or email. Continued use of Subman after updates indicates your acceptance of the revised policy.