Privacy Policy

Last updated: July 19, 2026

🔒 TL;DR — BillSensor reads billing emails as you browse Gmail — nothing leaves your browser. We never store your email content. We never sell your data. You can delete your account anytime.

1. Who We Are

BillSensor ("we", "us", "our") is a SaaS subscription monitoring tool built as a Chrome Extension with a supporting backend service. We are a product of Pratyasha Fashion Galaxy OPC Private Limited, registered in India. We help individuals and small businesses track SaaS subscriptions and avoid surprise charges.

2. What Data We Collect

Account data: Your email address and hashed password when you register.
Subscription data: Tool name, billing amount, next charge date, and cancellation URL — detected from billing emails you open in Gmail.
Gmail data: Email subject lines, sender addresses, and dates — read locally in your browser to detect billing emails. Email content is never sent to our servers.
Payment data: Handled entirely by Paddle. We never see or store your card details.

3. How We Read Gmail

BillSensor detects billing emails passively and locally — no Google account connection is required. Here is exactly how it works:

A browser content script reads Gmail's interface as you browse it normally
When you open a billing email, the extension reads the sender, subject, and visible text locally in your browser
No email content is ever sent to our servers — detection happens entirely on your device
We cannot send, delete, or modify any emails
BillSensor works without connecting your Google account

Pro feature (coming soon): Pro subscribers will optionally be able to connect Gmail via read-only OAuth to scan inbox history. This feature is not yet active. When enabled, our use of Gmail data will comply with the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Store Data

Account and subscription data is stored in a secured MySQL database on Hostinger servers.
Email content is never stored on our servers.
Passwords are hashed using bcrypt before storage.
JWT tokens are used for authentication and expire after 30 days.

5. Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

Paddle: Payment processing. Subject to Paddle's privacy policy.
Resend: Email delivery for alerts. Only your email address is shared.

6. Your Rights

Access your data at any time via the extension settings
Delete your account and all associated data by contacting us
Cancel your Pro subscription in one click via the billing portal

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days.

8. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and JWT authentication. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

BillSensor is not intended for users under the age of 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in the extension.

11. Contact Us

For privacy-related questions or data deletion requests, contact us at: hello@billsensor.com