Privacy Policy

Last updated: October 5, 2026

1. Who We Are

BillSensor ("we", "us", "our") is a SaaS subscription monitoring tool built as a Chrome Extension with a supporting backend service. We are a product of Pratyasha Fashion Galaxy OPC Private Limited, registered in India. We help individuals and small businesses track SaaS subscriptions and avoid surprise charges.

2. What Data We Collect

• Account data: Your email address and hashed password when you register.
• Subscription data: Tool name, billing amount, next charge date, and cancellation URL, detected from billing emails you open in Gmail or, if you connect it, scanned in Outlook.
• Gmail data: Email subject lines, sender addresses, and dates, read locally in your browser to detect billing emails. Email content is never sent to our servers.
• Outlook / Microsoft 365 data (only if you connect it): Subject lines, sender addresses, recipients, dates and a short preview of the message body, read through Microsoft Graph so we can recognise billing emails. This is processed on our servers and is not stored: what we keep is the subscription we recognised from it.
• Microsoft access token: If you connect Outlook, we store a token that lets the scan run again without asking you to sign in each time. It is read-only, it is never shared, and disconnecting deletes it.
• Support requests: If you contact us or raise a support request, we keep what you sent so we can answer it.
• Newsletter: Your email address, if you subscribe to our newsletter.
• Payment data: Handled entirely by Paddle. We never see or store your card details.

3. How We Read Gmail

BillSensor detects billing emails passively and locally, with no Google account connection required. Here is exactly how it works:

• A browser content script reads Gmail's interface as you browse it normally
• When you open a billing email, the extension reads the sender, subject, and visible text locally in your browser
• No email content is ever sent to our servers. Detection happens entirely on your device
• We cannot send, delete, or modify any emails
• BillSensor works without connecting your Google account

4. How Outlook and Microsoft 365 Scanning Works

This is optional, and it works differently from Gmail. The first scan is free on every plan. There is no browser tab for us to read, so the scan runs on our servers. You are told this before you connect, and nothing happens until you authorise it with Microsoft.

• You authorise us through Microsoft with the Mail.Read permission, which is read-only. We cannot send, delete or change anything in your mailbox.
• The first scan looks back over twelve months of billing email. After that it checks only what has arrived since. On the Free plan you start that re-scan yourself with Scan now. On Pro and Business it runs automatically every day.
• For each message we read the subject, sender, recipients, date and a short preview of the body, in order to recognise a subscription, its amount and its next charge date.
• That content is processed, not stored. What we keep is the subscription we recognised: the tool, the amount, the currency, the billing cycle and the next charge date.
• We store a Microsoft token so later scans do not have to ask you to sign in again. It is read-only and it is never shared with anyone.
• You can disconnect at any time from the extension. Disconnecting deletes that token and stops all scanning. You can also revoke our access from your own Microsoft account settings.

5. How We Store Data

• Account and subscription data is stored in a secured MySQL database on Hostinger servers.
• Email content is never stored on our servers.
• Passwords are hashed using bcrypt before storage.
• JWT tokens are used for authentication and expire after 30 days.
• Your Microsoft access token, if you connected Outlook, is stored in that same database and is never returned by any public part of the service.
• Password reset links are stored only as a one-way hash, so a copy of our database cannot be used to reset anyone's password. They expire after one hour and work once.

6. Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

• Paddle: Payment processing. Subject to Paddle's privacy policy.
• Resend: Email delivery for alerts. Only your email address is shared.
• Microsoft: If you connect Outlook or Microsoft 365, we call Microsoft Graph on your behalf to read billing email. We send them your authorisation, not your data.

We do not use your data to train any model, and we do not share it with advertisers.

7. Your Rights

• See everything we hold for you in the extension, and on the dashboard if you are on a paid plan
• Delete your account yourself, from your account page or from the extension settings. You do not need to ask us
• Disconnect Outlook at any time, which deletes the access token we hold
• Cancel a paid plan in one click through the billing portal
• Ask us for a copy of your data, or for it to be corrected, by emailing hello@billsensor.com

8. Data Retention

We keep your account data for as long as your account exists.

Deleting your account is immediate and permanent. It removes your account, every subscription we recorded for you, your alert history, your Microsoft access token if you had connected Outlook, any support requests you sent us and any newsletter subscription. There is no recovery window and no archived copy. If you have an active paid plan, cancel it first; deletion is refused until then so you cannot be billed for an account that no longer exists.

Anything the extension stored on your own device stays there until you clear it from the extension settings or uninstall it.

9. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and JWT authentication. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

BillSensor is not intended for users under the age of 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in the extension.

12. Contact Us

For privacy-related questions or data deletion requests, contact us at: hello@billsensor.com