Privacy Policy

1. Introduction

RecurStop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our subscription tracking service available at recurstop.com (the "Service").

By using RecurStop, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Full name (optional)
• Password (stored as a secure hash, never in plain text)
• Profile preferences (timezone, notification settings)

2.2 Subscription Data

To provide our Service, we collect information about your subscriptions:

• Subscription name and service provider
• Subscription amount and currency
• Billing cycle and renewal dates
• Subscription status (active, cancelled, trial)
• Notes you add to subscriptions

2.3 Email Data (Optional Feature)

If you choose to connect your email account (Gmail or Outlook), we access:

• Subscription-related emails only (receipts, confirmations, renewal notices)
• We use read-only access to scan for subscription information
• We do NOT read personal emails, attachments, or other communications
• Email connection is completely optional - you can use RecurStop with manual entry only

2.4 Payment Information

We do NOT store your credit card numbers, CVV, or bank account details. All payment processing is handled securely by our payment partners:

• Stripe for international payments (USD)
• Razorpay for Indian payments (INR)

We only receive confirmation of successful payments, not your actual payment credentials.

2.5 Usage Data

We automatically collect certain information when you use our Service:

• IP address and approximate location (country/city level)
• Browser type and version
• Device type (desktop, mobile, tablet)
• Pages visited and features used
• Time spent on the Service

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: Track your subscriptions, calculate spending, and display your dashboard
• Send Notifications: Renewal reminders, trial expiration alerts, and price change notifications
• Process Payments: Handle subscription upgrades and billing for Pro tier
• Improve the Service: Analyze usage patterns to enhance features and fix bugs
• Customer Support: Respond to your inquiries and resolve issues
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Fulfill our legal obligations and enforce our terms

5. How We Share Your Information

We do NOT sell your personal information. We share your information only in the following circumstances:

5.1 Service Providers

We use trusted third-party services to operate RecurStop:

• Supabase: Database and authentication infrastructure
• Vercel: Website hosting and deployment
• Stripe: Payment processing for international users (Privacy Policy)
• Razorpay: Payment processing for Indian users (Privacy Policy)
• Resend: Transactional email delivery
• Google: Gmail API for email-based subscription detection
• Microsoft: Outlook API for email-based subscription detection

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users or the public.

5.3 Business Transfers

If RecurStop is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

6. Data Security

We implement industry-standard security measures to protect your data:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for data in transit
• OAuth tokens are encrypted and securely stored
• Regular security assessments and monitoring
• Access controls and audit logging
• Secure password hashing (bcrypt)

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for the following periods:

• Active account data: For the duration of your account plus 12 months after deletion
• Cancelled subscriptions: 12 months (for your reference)
• Payment records: 7 years (as required by tax law)
• Email OAuth tokens: Until you disconnect your email account
• Usage analytics: Aggregated and anonymized, retained indefinitely

8. Your Rights

8.1 For All Users

Regardless of your location, you have the right to:

• Access your personal data
• Correct inaccurate data
• Export your data (CSV/JSON format)
• Delete your account and data
• Disconnect email accounts at any time
• Opt out of marketing emails

8.2 For European Union Residents (GDPR)

Under the General Data Protection Regulation (GDPR), you also have the right to:

• Request restriction of processing
• Object to processing based on legitimate interests
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time
• Lodge a complaint with your local supervisory authority

Legal Bases for Processing: We process your data based on: (a) your consent (for email connection and marketing), (b) contractual necessity (to provide the Service), and (c) legitimate interests (for security and analytics).

8.3 For California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do NOT sell your data)
• Non-discrimination for exercising your rights

Do Not Sell My Personal Information: RecurStop does not sell personal information to third parties.

8.4 For Indian Residents (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data
• Correction and erasure of inaccurate data
• Nominate another person to exercise your rights
• Grievance redressal

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our servers are located in [Supabase region - to be specified]. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission for transfers from the EU.

10. Children's Privacy

RecurStop is not intended for users under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete that information promptly. If you believe we have collected information from a child, please contact us.

11. Cookies and Tracking

We use essential cookies to:

• Keep you signed in to your account
• Remember your preferences
• Ensure security of your session

We use privacy-friendly analytics that do not track you across websites or create advertising profiles.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will also notify you via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

We will respond to your request within 30 days.