Privacy Policy

Last updated June 17, 2026

Overview

Subtract helps you find, visualize, and reduce recurring spend. This policy explains what we collect, why, and the controls you have. We collect the minimum needed to run the product and never sell your data.

What we collect

Account details (name, email), workspace and team membership, and the financial data you connect — bank transactions and accounts via Plaid, email receipts via your connected inbox, and metered API usage from providers you link. Provider credentials and access tokens are encrypted at rest in a dedicated secrets vault and are never exposed to the browser.

How we use it

To detect subscriptions, compute analytics and recommendations, raise budget and spend alerts, and — only when you explicitly approve — draft and send cancellations on your behalf. We do not use your financial data for advertising.

Third parties

We rely on Plaid (bank connectivity), Stripe (billing), Supabase (database/auth), and Resend (email). Each processes data solely to provide their service to Subtract.

Your rights (GDPR / CCPA)

You can export all of your workspace data as JSON, and permanently delete your account and associated data, from Settings → Data & Privacy. Deletion is irreversible and cascades across your personal workspace.

Contact

Questions about privacy? Email privacy@subtract.money.