Privacy Policy – SubXero

1. Introduction

We respect your privacy.

SubXero is designed to help you identify and unsubscribe from unwanted email subscriptions without reading, selling, or misusing your personal data.

This Privacy Policy explains:

• What data we access
• Why we access it
• How it is used
• How it is protected
• Your control over it

If you do not agree with this policy, please do not use SubXero.

2. What data we access

When you connect your email account (such as Gmail or Outlook), SubXero accesses only the information necessary to provide the unsubscribe service.

We may access:

• Email metadata, including:
  • Sender address
  • Sender domain
  • Email headers (including the List-Unsubscribe header)
  • Date received

We do not:

• Read the content of your emails
• Store email bodies
• Access attachments
• Access contacts or calendars

Our goal is to detect subscription senders, not your personal communications.

3. How we use your data

Your data is used only to:

• Identify email subscriptions
• Detect legitimate unsubscribe mechanisms
• Execute unsubscribe actions you explicitly request
• Display your subscriptions and cleanup progress

We do not use your data for:

• Advertising or marketing
• Profiling or analytics unrelated to SubXero
• Selling or sharing with third parties

4. Unsubscribe actions

When you choose to unsubscribe from an email sender, SubXero will:

• Use official unsubscribe mechanisms (e.g., List-Unsubscribe links or mailto addresses), or
• Redirect you to the sender’s unsubscribe or preference page for manual confirmation

SubXero does not:

• Bypass security measures
• Log into third-party websites on your behalf
• Complete forms without your consent

All unsubscribe actions are initiated only by you.

5. Data storage

We store minimal data, including:

• Your user ID
• Subscription sender information (email/domain)
• Unsubscribe method and status
• Timestamps of actions

We do not permanently store:

• Email bodies or content
• Personal conversations

Where possible, data is processed temporarily and discarded once the action is complete.

6. Data security

SubXero takes security seriously.

We implement:

• Secure authentication using OAuth (we never see your email password)
• Encrypted data storage
• Restricted backend access
• Least-privilege access to third-party APIs

No system is 100% secure, but we continuously improve safeguards to protect your data.

7. Third-party services

SubXero uses trusted third-party services solely to provide its functionality, including:

• Email providers (e.g., Gmail API)
• Hosting and backend infrastructure

These services are governed by their own privacy policies. SubXero does not allow third parties to use your data for their own purposes.

8. Your rights and control

You are always in control.

You can:

• Disconnect your email account at any time
• Delete your account and associated data
• Stop using SubXero immediately

Once you disconnect your account, SubXero no longer accesses your email data.

9. POPIA & data protection compliance

SubXero complies with applicable data protection laws, including the Protection of Personal Information Act (POPIA).

We process personal information:

• Lawfully
• Transparently
• For a specific purpose
• Only for as long as necessary

10. Changes to this policy

We may update this Privacy Policy from time to time.

If changes are significant, we will notify users through the App or our website. Continued use of SubXero constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at:

Email: support@subxero.co.za

Website: subxero.co.za