SwitchHelp Renewals

Privacy Policy

Last updated: October 29, 2026

This page explains how SwitchHelp Renewals handles information in the current MVP. For privacy questions or requests, contact cmei1080222@gmail.com.

Information the service stores

  • Account information: your email address and account timezone.
  • Subscription information you enter: service and merchant names, optional price and currency, billing cycle, renewal date, payer, reminder choices, timezone, and optional notes.
  • Security and connection records: hashed sign-in and session tokens, session and CSRF data, temporary sign-in verification records, email and IP-based rate-limit keys, and OAuth/MCP client, permission, token-hash, and expiry records when you connect an assistant.
  • Reminder delivery records: renewal date, reminder offset, delivery status, attempt time, provider message ID, and limited delivery diagnostics.

How information is used

We use this information to sign you in, store and display your subscriptions, calculate renewal reminders, send requested transactional emails, protect the service from abuse, and provide an AI assistant connection only when you authorize one.

The service does not include advertising trackers or third-party analytics in this MVP. It does not use subscription information to send marketing emails.

Service providers and sharing

  • Cloudflare hosts the web application and D1 database. Cloudflare may process network and request information needed to operate and secure the service. See Cloudflare's Privacy Policy.
  • Resend sends sign-in links and renewal reminders. To deliver these messages, it receives the recipient email address and message content. Sign-in emails contain a one-time link; reminders can contain subscription names, renewal dates, and optional price details. Resend says email and log data is retained for 30 days and stored in the United States. See Resend's security and retention information and Resend's Privacy Policy.
  • An AI assistant you connect: if you authorize an MCP client, that client can read the active subscription fields allowed by its scope and can add subscriptions if you grant write scope. The assistant provider's own terms and privacy practices also apply.

Information may also be disclosed when required by law or to protect the service and its users.

Cookies

The app uses a necessary, HttpOnly session cookie to keep you signed in (up to 30 days) and a necessary, HttpOnly CSRF cookie for sign-in forms (up to one hour). Both use SameSite=Lax; session cookies use Secure in production. The app does not use advertising cookies.

Retention and deletion

Account and subscription records remain in the active application database until you delete the account. You can edit or delete individual subscriptions, disconnect an AI assistant, or permanently delete your account from Account Settings. Account deletion removes the account and its associated subscriptions, reminder records, sessions, and assistant authorizations from the active database. Expired sign-in, session, OAuth, and rate-limit records are periodically cleaned up.

Deleting an account cannot recall emails already accepted by Resend or erase records that Resend or Cloudflare may retain under their own policies. Cloudflare D1 Time Travel may retain historical database versions for a period that depends on the Cloudflare account plan; deleting current records does not immediately erase those historical versions. See Cloudflare D1 Time Travel.

Your choices

You can correct subscription information in the app, change your account timezone, turn off reminders by editing reminder choices, revoke an assistant connection in Settings, or delete your account there. An email already in the process of delivery may still arrive after you change or delete a record.

For a privacy question or request, email cmei1080222@gmail.com.