Privacy Policy

Last updated: April 4, 2026

1. Introduction

EDC Properties Inc. ("Company," "we," "us," or "our") operates Subtrack ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, name, and authentication credentials. If you sign in with Google, we receive your name, email, and profile picture from Google.

2.2 Subscription Data

We collect and store information about your subscriptions, domains, certificates, and services that you add to the platform — either manually, via integrations, or through automated scanning.

2.3 Integration Data

When you connect third-party services (e.g., Namecheap, Cloudflare, GoDaddy), we store encrypted API credentials and the data retrieved from those services (domain names, expiration dates, SSL certificate details).

2.4 Financial Data

If you connect a financial account through Plaid, we receive transaction data including merchant names, amounts, dates, and categories. We do not receive or store your bank account credentials, passwords, or full account numbers. Financial data is processed by Plaid Inc. in accordance with their privacy policy.

2.5 Email Data

If you connect your Gmail account, we access email metadata (sender, subject, date) and body content solely to identify subscription receipts and renewal notices. We do not store full email content — only extracted subscription data (provider name, amount, date).

2.6 Usage Data

We automatically collect certain information when you use the Service, including IP address, browser type, device information, pages visited, and referring URLs.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Send renewal alerts and notifications
  • Identify and track your subscriptions and recurring charges
  • Process payments and manage your subscription plan
  • Communicate with you about the Service
  • Detect, prevent, and address fraud and security issues
  • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Service providers: Third parties that help us operate the Service (hosting, analytics, payment processing)
  • Financial data partners: Plaid Inc. for processing financial account connections
  • Legal compliance: When required by law, regulation, or legal process
  • Business transfers: In connection with a merger, acquisition, or sale of assets
  • Organization members: If you use the Service within an organization, other members may see shared subscription data

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security reviews. See our Security Policy for details.

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it. Aggregated, anonymized data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Delete your personal data
  • Export your data in a portable format
  • Opt out of marketing communications
  • Restrict or object to certain processing of your data

To exercise any of these rights, contact us at privacy@getsubtrack.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies. You can control cookies through your browser settings.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

10. International Data Transfers

Your data may be processed in the United States. By using the Service, you consent to the transfer of your data to the United States, which may have different data protection laws than your jurisdiction.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes take effect constitutes acceptance.

13. Contact

For questions about this Privacy Policy:
EDC Properties Inc.
10301 Ranch Road 2222, Austin, TX 78730
Email: privacy@getsubtrack.com