Privacy Policy

RenewShield (“we”, “us”) is a subscription tracking service that helps you monitor renewals, trials, and cancellation deadlines. This policy explains what personal data we collect, why we collect it, and how you can control it.

Account data: your email address, name, and authentication identifiers when you sign up or sign in (via AWS Cognito in production). Subscription data: the subscription names, amounts, renewal dates, and notes you enter manually — we do not connect to your bank or card providers. Security logs: sign-in events and optional two-factor authentication status. Technical data: basic request logs from our hosting provider for reliability and abuse prevention.

We use your data to provide the service (storing and displaying your subscriptions, sending reminders you configure, and keeping your account secure). We do not sell your personal data. We do not use your subscription list for advertising.

RenewShield is privacy-first by design: we do not require bank or card connections, we do not scrape your email for receipts unless you explicitly add that feature in the future, and we do not share your subscription details with third parties for marketing.

Your data is stored in encrypted PostgreSQL databases (Neon) in the EU region. Passwords are handled by AWS Cognito — we never store plain-text passwords. Two-factor authentication secrets are encrypted at rest. Sessions use signed tokens. Production traffic is served over HTTPS.

You can access and update your account data from the app settings. You can permanently delete your account from Settings → Security when you are not the sole owner of a shared workspace with other members. If you are in the EU/EEA, you have rights under GDPR including access, rectification, erasure, and data portability.

We may update this policy as the product evolves. Material changes will be noted on this page. Contact details will be updated soon.