SubPuffin Google User Data Policy

1. Scope and availability

This Google User Data Policy describes how SubPuffin accesses, uses, retains, shares and protects information obtained through Google APIs, including the Gmail API. It supplements the SubPuffin Privacy Policy.

Gmail-based subscription discovery is an optional feature available after you connect your Google account and grant read-only access. Email-based cancellation assistance is planned and is not currently enabled. Neither feature is enabled merely because you use manual subscription management.

We identify the permissions requested, describe the processing, and obtain your authorization through Google’s authorization process. This Policy applies when you choose to connect your Google account.

2. Google permissions we request

We request only the minimum Google permissions needed for the feature you choose to enable. We currently request:

• https://www.googleapis.com/auth/gmail.readonly for optional subscription discovery.

Read access is used to identify subscription-related receipts, bills and renewal notices. We do not currently request Gmail send access. If cancellation assistance is introduced, we will request the necessary sending permission separately and will send a request only after displaying the sending account, recipient and message content and receiving your confirmation.

We do not ask you to provide your Google account password to SubPuffin. Google’s authorization process controls the permissions you grant.

3. Limited Use commitment

SubPuffin’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use information received from Google APIs only to provide and secure the Google API feature you have enabled, operate SubPuffin’s subscription-management functions, respond to your requests and comply with applicable law.

We do not sell information received from Google APIs. We do not use it for advertising, profiling for advertising, credit assessment or lending. We do not use it, or allow service providers to use it, to train or improve general-purpose, cross-user or other non-personalized AI models.

SubPuffin does not use Google APIs or Google user data to create, generate, or distribute AI-generated non-consensual intimate imagery (NCII) or any other prohibited content, and does not use Google APIs to generate sexual content involving real people without consent.

4. Information accessed and derived

When you connect Gmail and authorize read-only access, processing may involve your authorized email address and relevant messages’ senders, recipients, subjects, dates, message identifiers and the portions of message content needed to identify subscriptions.

From relevant messages, we derive service or merchant names, amounts, currencies, billing cycles, renewal dates and related subscription statuses. The initial scan may cover up to the most recent 12 months of relevant messages; while the connection remains active, we may perform periodic or on-demand synchronization. We do not read attachments for subscription discovery and do not use read access to send, delete, archive or modify messages.

When you confirm a cancellation or plan-change request, the designated provider receives the message content you approved. The request may include your email address, service name and necessary subscription identifiers.

5. Sharing and service providers

Tencent Cloud provides hosting, storage and delivery for account and derived subscription data. Google processes authentication and Gmail API requests. No external AI provider processes Gmail content in the current release.

We share Google API data only as needed to provide the authorized feature, comply with law, or complete a transaction permitted by the Google API Services User Data Policy and applicable law. A provider that receives a cancellation request receives the content you confirm for sending.

Google permission authorization does not replace other applicable data-protection requirements.

6. Retention and deletion

We retain Google API data only as long as needed for the authorized feature and according to the data-retention section of the Privacy Policy. Account and derived subscription data are retained while your account is active and deleted according to the account-deletion workflow. OAuth tokens are removed or invalidated after revocation or disconnection. Raw email content is not retained beyond processing. Cancellation records, if enabled later, are retained for up to 24 months.

You may disconnect Gmail access or request deletion of personal data through the controls described in the Privacy Policy. Disconnecting does not recall a cancellation request that has already been sent.

7. Your controls

You may review and remove SubPuffin’s Google account permissions through Google Account Permissions. You may also disconnect Gmail through the app’s Connected accounts controls or revoke access through your Google Account permissions.

After disconnection or revocation, we stop subsequent Google API synchronization and actions not yet executed. Existing data is handled under the Privacy Policy and this Policy.

8. Security

We apply safeguards appropriate to Google API data, including TLS 1.2 or higher for data in transit, encryption at rest for sensitive data, secure credential management for OAuth tokens, role-based access controls based on least privilege, and logging and monitoring to detect unauthorized access. No system can guarantee absolute security.

9. Changes to this Policy

We will update this page and its effective date when this Policy changes. New Google permissions, actions or data uses require the relevant separate notice, consent or authorization before they begin. Where required, we will also complete any applicable Google security assessment.