Privacy policy

Unsave is a product of Avara (“Avara”, “we”, “us”), which is responsible for the data described here. Unsave helps you find websites that are likely storing your payment card, and guides you to remove it. This policy explains exactly what we access, what we keep, and what we never touch.

What we never collect

• Full card numbers, expiry dates or security codes. We only ask for the last four digits.
• Passwords for any website. You remove cards yourself.
• Email content or attachments. Message text is read only inside your browser and never sent to us.
• Your statement files. CSVs are read in your browser and never uploaded.

Gmail data

If you connect Gmail, we request read-only access (gmail.readonly) because Gmail search requires it. Your browser uses a short-lived token to search for receipts, order confirmations, trial sign-ups and renewal notices, and reads each matching message's sender, subject, date and text in your browser to find the merchant, the amount, the billing period and whether your card's last four digits appear. Attachments are never opened. The token is never sent to our servers and is revoked when your scan ends.

From those messages your browser derives a list of merchants with dates, amounts and the type of evidence (for example “receipt naming the card”). Only that derived list is saved to your account. We do not store subjects, senders' addresses or message content.

Unsave's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, do not sell it, do not use it to train AI models, and do not allow humans to read it except with your explicit consent for support, for security purposes, or to comply with law.

Outlook data

If you connect Outlook, we request Mail.Read and User.Read from Microsoft. The same rules apply: your browser searches for receipts and reads each matching message's sender, subject, date and text in your browser, the same way. The token is held in your browser's memory, never sent to our servers, and expires within about an hour.

What we store

• Your email address (for sign-in).
• Card nickname and last four digits.
• Findings: merchant name and domain, first and last seen dates, amounts, and the status you set (removed, kept, etc.).
• Purchase records from Stripe. Stripe processes payments; we never see your payment card for Unsave itself.

Deleting your data

You can delete your account at any time from Account in the app. Your account, cards, scans and results are permanently deleted 30 days later; sign in before then to cancel. Stripe keeps its own record of payments, as the law requires. You can also email hello@useunsave.com and we'll delete it for you.

Service providers

Supabase (database and authentication), Vercel (hosting), Stripe (payments) and PostHog (product analytics). Each processes data only to provide its service to us.

PostHog receives the pages you visit, what you click, your email address and account ID once you sign in, counts such as how many sites a scan found, and recordings of how you use the site. The sites found in your results are hidden from those recordings, and PostHog never receives anything from your email or statement files.

To show a site's icon in your results, our server requests it from Google's public favicon service using only the site's web address (for example, netflix.com). The request comes from our server, not your browser, and carries nothing about you; icons are cached so the same site isn't requested again.

Contact

Avara, operator of Unsave · hello@useunsave.com