What we collect - Your email address (to sign you in and send reminders). - Emails you choose to forward to your personal Trial Guard address. We extract only: service name, price, billing period, trial/renewal date, whether it is a trial or price change, and how it is billed (e.g. Apple, Google Play). - Sign-in data: one-time sign-in links (stored only as a hash, valid 15 minutes, single use) and session cookies (stored as a hash, 30 days, one strictly necessary cookie "tg_session"). - Rate-limiting records: a one-way hash of your email/IP address and a timestamp, used to prevent abuse of sign-in and inbound email; deleted after 24 hours. - Payment status from Stripe if you upgrade (we never see full card numbers). - A log of emails we sent you (kept 90 days to troubleshoot delivery).
Raw email deletion The full forwarded email (including any personal details it contains) is held only while it is parsed and is deleted immediately afterwards, whether parsing succeeds or fails. A scheduled clean-up deletes any leftover raw email within 60 minutes as a safety net. Emails from unknown senders are discarded and never create an account.
Why (lawful basis): to provide the reminder service you asked for (contract, Art. 6(1)(b) UK GDPR); abuse prevention and security (legitimate interests, Art. 6(1)(f)). Service emails only – no marketing without consent (PECR).
Processors: hosting [provider, region], email (Postmark, US – UK IDTA/Addendum or UK-US Data Bridge), payments (Stripe). SMS (Twilio) only if/when SMS reminders launch.
Your rights and self-service tools - Access/portability: Dashboard → "Download my data" gives a JSON file of your account and tracked subscriptions instantly. - Erasure: Dashboard → "Delete account" (type DELETE) immediately and permanently deletes your account, tracked subscriptions, sign-in links, sessions and sent-email log, and cancels any active Trial Guard Pro subscription in Stripe. We send one confirmation email, which is not logged. Encrypted backups roll off within [30] days. - You can also ask for rectification, restriction or objection at privacy@[domain], and complain to the ICO (ico.org.uk, 0303 123 1113).
Retention: account data while your account is active; deleted immediately when you delete your account (backups within [30] days). Stripe keeps payment records as required by law.