Last updated: July 10, 2026 · Reviewed at least annually
Purpose and scope
This policy covers all consumer data handled by MySubscriptions: the financial data we receive through Plaid, the account information you give us, records created while we work on your behalf, and the operational copies (backups, logs) that keep the service running. It applies to production systems, backups, and internal tooling alike. It is paired with our Data Disposal Policy, which governs how data is permanently destroyed once a retention period ends.
What we retain, and for how long
- Account and profile data (name, email, hashed password, consent records) — kept for the life of your account. Permanently deleted when you delete your account.
- Bank connection tokens (encrypted at rest) — kept until you disconnect that bank or delete your account, at which point the token is revoked at Plaid. Connections that stop working are automatically revoked and removed after 30 days rather than lingering.
- Financial data received from Plaid (account names, balances, transactions) and the subscriptions we detect from it — kept for the life of your account so your history and savings stay visible. Disconnecting a bank stops all new collection from it immediately; deleting your account permanently deletes all of it.
- Cancellation request records (including any details you provide for a request, which are encrypted at rest) — kept for the life of your account and deleted with it.
- Billing records — payments are processed by Stripe; we retain the minimal billing metadata required to meet tax, accounting, and dispute obligations, and only for as long as those laws require.
- Server and application logs — retained for up to 90 days for security monitoring and troubleshooting, then deleted. Logs never contain bank credentials (we never have them) or full account numbers (we never request them).
- Backups — encrypted and automatically aged out within 30 days. Data you delete falls out of every backup within that window.
Your controls
- Delete your account any time from Profile → Delete Account — no email required, no waiting period.
- Disconnect any individual bank any time; collection from it stops immediately.
- Depending on your state of residence you may have additional rights to access, correct, or receive a copy of your data — see our Privacy Policy.
Policy review
This policy is reviewed at least annually, and whenever we add a new category of data or a new processor. Questions or data requests: security@mysubscriptions.com.