← Back to Ditch
Privacy Policy
Last updated: June 4, 2026
The short version: We scan your email to find subscriptions. We only read billing-related metadata (sender, subject, amounts, dates). We never store your email content, sell your data, or share it with third parties.
1. What We Collect
When you use Ditch, we collect:
- Account info: Your name, email address, and profile picture from Google or Microsoft sign-in.
- Billing metadata: Sender name, subject line, subscription amount, renewal date, and payment method last-4 digits extracted from your email.
- OAuth tokens: Encrypted refresh tokens to maintain inbox access. These are stored encrypted and never exposed.
2. What We Don't Collect
- We do not store the full content of your emails.
- We do not read personal, social, or non-billing emails.
- We do not collect passwords. Authentication is handled entirely by Google or Microsoft.
3. How We Use Your Data
Your data is used solely to:
- Identify active subscriptions and recurring charges.
- Send you renewal alerts before you get charged.
- Provide cancellation guides and playbooks.
4. Email Access (Gmail & Outlook)
We request read-only access to your inbox:
- Google:
gmail.readonly scope
- Microsoft:
Mail.Read scope
Email content is processed in memory during scanning and is never written to disk or stored in our database. We extract only billing metadata.
5. Data Storage & Security
- Account and subscription data is stored in encrypted databases.
- OAuth tokens are encrypted at rest.
- All connections use HTTPS/TLS.
- We do not use third-party analytics or tracking scripts.
6. Data Sharing
We do not sell, rent, or share your personal data with any third party. Period.
7. Data Retention & Deletion
You can delete your account at any time. When you do:
- All your data (subscriptions, inboxes, tokens) is permanently deleted.
- OAuth access is revoked with Google/Microsoft.
- This action is irreversible.
8. Your Rights
You have the right to:
- Access all data we hold about you.
- Request correction of inaccurate data.
- Delete your account and all associated data.
- Revoke inbox access at any time.
9. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email or in-app notification.
10. Contact
Questions about this policy? Email us at privacy@getditch.net.