Privacy Policy

This policy explains what personal data SubMate collects, why, and how we protect it.

What we collect

• Account information: your name, email and profile picture when you sign in with Google.
• Order information: the products and plans you purchase, your order numbers, and the payment method you choose.
• Payment proof: the screenshots you upload for verification.
• Usage data: technical logs (IP address, browser, timestamps) for security and debugging.

How we use your data

• To create and manage your orders and subscriptions.
• To verify payments (AI pre-check plus human review).
• To deliver your access details securely.
• To send you important notifications about your orders and subscriptions.
• To prevent fraud and abuse.

What we never do

• We never sell or rent your personal data.
• We never share your credentials or account details with other customers.
• We don't access or store your Google password — authentication happens entirely with Google.

How we protect your data

Access credentials are encrypted at rest (AES-256-GCM) with a key that never touches the database. Payment screenshots are stored in private object storage with signed, expiring URLs. Every sensitive admin action is written to an audit log.

Retention

We keep order and subscription records for as long as your account is active and as required for tax and fraud-prevention purposes. Read notifications are periodically removed.

Your rights

You can request a copy of your data, ask us to correct it, or delete your account at any time by contacting support@submate.tech.