Last updated: July 10, 2026 · Reviewed at least annually
Purpose and scope
This policy governs the secure disposal of all consumer data handled by MySubscriptions — financial data received through Plaid, account information, cancellation records, and operational copies (backups, logs) — across production systems and internal tooling. What we keep and for how long is defined in our Data Retention Policy; this document covers what happens when that time is up.
What triggers disposal
- You delete your account — disposal starts immediately, with no waiting period and no support ticket.
- You disconnect a bank — our access token is revoked at Plaid and collection from that bank stops immediately.
- A bank connection stops working — it is automatically revoked and removed after 30 days rather than lingering.
- A retention period expires — logs (up to 90 days) and backups (up to 30 days) are destroyed on schedule without anyone needing to remember.
How data is destroyed
- Access revocation first: when an account is deleted, every bank connection is revoked at Plaid before anything else — honoring your deletion on Plaid's side as well as ours.
- Cascading deletion: database constraints then purge bank connections, accounts, transactions, detected subscriptions, and cancellation history in the same operation. There is no partial state where some of your financial data survives.
- Backups: deleted data leaves every backup automatically as backups age out — 30 days at most.
- Logs: expire on rotation within 90 days, and never contain bank credentials (we never have them) or full account numbers (we never request them).
- The most sensitive fields — bank connection tokens and cancellation details — are encrypted at rest, so any residual copy is unreadable without keys we control and can rotate.
- Physical media is managed by our cloud infrastructure provider and sanitized to industry standard when hardware is decommissioned.
Enforcement
Disposal is built into the application rather than performed by hand: deletion cascades are database constraints, connection pruning and backup age-out run on a schedule, and the deletion flow is covered by our automated test suite. A human forgetting is not a failure mode.
Policy review
This policy is reviewed at least annually, and whenever we add a new category of data or a new processor. Questions or data requests: security@mysubscriptions.com.