The short version
- We collect only what's needed: your name, email, WhatsApp number, and the subscriptions you choose to track.
- We never ask for your bank login, OTP, UPI PIN, or card details — payment data goes directly to Razorpay.
- We never sell your data. Ever.
- You can request your data or have it deleted any time by emailing hello@mysubtrack.in.
1. Who we are
SubTrack ("we", "us", "our") is a subscription-tracking service operated by Asquare India, located in Unnao, UP, India. This policy explains how we handle personal information when you visit our website at mysubtrack.in or use our service.
This policy is governed by the laws of India, including the Information Technology Act 2000, the IT (Reasonable Security Practices) Rules 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. Information we collect
2.1 Information you give us
- Account information: full name, email address, WhatsApp/mobile number.
- Subscription information you enter: the names, amounts, and renewal dates of the services you want SubTrack to monitor (e.g. Netflix, Spotify). You enter this manually.
- Communication: messages, support tickets, and feedback you send us.
2.2 Information collected automatically
- Usage data: pages visited, features used, approximate session duration.
- Device data: browser type, operating system, screen size, anonymised IP address.
- Cookies: see our Cookie Policy for details.
2.3 What we do NOT collect
SubTrack does not ask for or store your bank account credentials, UPI PIN, OTPs, debit/credit card details, or any login passwords to your other apps. Payment processing is handled entirely by Razorpay — your card or UPI details go directly to them and are never seen or stored by us.
3. How we use your information
We use the information we collect strictly for these purposes:
- To create and maintain your SubTrack account.
- To send you reminders via WhatsApp and email before your subscriptions renew (this is the core service you signed up for).
- To process your founding-member or subscription payment via Razorpay.
- To respond to your support requests and feedback.
- To improve and secure our service.
- To comply with our legal obligations under Indian law.
We will never use your data for advertising, profiling, or selling to third parties.
4. Who we share your information with
SubTrack relies on a small number of trusted service providers to deliver the service. We share only the minimum information required, and only with the following:
| Provider | Purpose | Data shared |
|---|---|---|
| Razorpay | Payment processing | Name, email, phone, payment amount |
| AiSensy / WhatsApp Business API | WhatsApp reminders | Name, phone, subscription names |
| Resend | Email reminders & confirmations | Name, email, reminder content |
| ServerByt / our hosting provider | Website and database hosting | All account data (encrypted at rest) |
Each of these providers operates under strict data-protection agreements and is independently responsible for the data they handle. We do not sell or rent your information to anyone.
We may also disclose information if required by Indian law, court order, or government request — but only to the extent legally necessary.
5. How long we keep your data
- Active accounts: for as long as your subscription is active.
- After cancellation: we retain account data for 12 months for support and dispute resolution, then permanently delete it.
- Payment records: retained for 8 years as required by Indian tax and accounting laws.
- Anonymised analytics: may be kept indefinitely with no personal identifiers.
6. How we protect your data
We follow industry-standard security practices including HTTPS/TLS encryption for all data in transit, encrypted database storage, hashed passwords (never stored in plain text), restricted access to administrative systems, and regular security reviews.
No system is completely impervious to attack. If a data breach affecting your information occurs, we will notify you and the relevant authorities within the timeframes required by the DPDP Act.
7. Your rights
Under the DPDP Act 2023, you have the following rights regarding your personal data:
- Right to access: request a copy of the personal data we hold about you.
- Right to correction: ask us to fix anything that's inaccurate.
- Right to erasure: ask us to delete your data (subject to legal retention requirements).
- Right to withdraw consent: at any time, with no penalty.
- Right to grievance redressal: contact our Grievance Officer below.
- Right to nominate: nominate someone to exercise your rights in case of death or incapacity.
To exercise any of these rights, email hello@mysubtrack.in. We respond within 30 days.
8. Cookies
We use a small number of essential cookies to keep you logged in and remember your preferences. We do not use third-party advertising or tracking cookies. Full details in our Cookie Policy.
9. Children
SubTrack is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, please contact us and we will delete the account.
10. International data transfers
Your data is primarily stored on servers located in India. Some service providers (such as Razorpay and Resend) may process data on infrastructure located outside India. In such cases, we ensure data-protection safeguards equivalent to Indian standards apply.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will always reflect the current version. For significant changes, we will notify you by email at least 14 days before the change takes effect.
12. Grievance Officer
In accordance with the IT Rules 2011 and DPDP Act 2023, our designated Grievance Officer is:
Grievance Officer, SubTrack
Email: hello@mysubtrack.in
Address: Shiv Palace, Ghatampur, Bighapur, Unnao, UP, India - 209865
Response time: within 30 days of receipt
13. Contact
For any questions about this policy or how we handle your data, write to us at hello@mysubtrack.in.