Privacy Policy
Last updated: November 15, 2026
In short
- Your bank statement is never stored. It is read in memory for the scan, then deleted.
- Card and account numbers are masked before any automated analysis.
- We only keep the subscriptions you confirm, and we never sell or share your personal information for advertising.
1. Who is responsible
Trait Numérique SAS, a French simplified joint-stock company (SAS) with a share capital of €100, registered with the Poitiers Trade and Companies Register (RCS) under number 994 414 068, trading as Dev Altitude, 41 rue Aglophile Fradin, 86100 Châtellerault, France, which operates DropMySubs.
Privacy contact: juridique@dev-altitude.com
2. What we collect and why
| Data | Why |
|---|---|
| Account: first name, last name, email, password (hashed) | Create and secure your account |
| Uploaded statement | Detect your subscriptions, then deleted immediately |
| Confirmed subscriptions: service, amount, frequency, dates, cancellation status | Dashboard, monitoring, reminders |
| Upload history: date and number of transactions (no banking content) | Monitoring, free scan limit |
| Mailing address, account number with a merchant (if you enter them) | Pre-fill your cancellation letters |
| DropMySubs subscription: status, dates, Stripe customer ID | Billing |
| Reminder emails sent | Avoid duplicates (you can turn reminders off) |
| Technical logs (IP address, browser) | Security of the service |
During the free scan, subscriptions found in earlier months are kept in masked form only if you leave the box checked, so we can show them if you subscribe.
3. Automated analysis
Statement analysis is automated and may use an artificial intelligence model. It only detects recurring payments; it makes no decision with legal or similar effects on you, and you confirm the results yourself.
4. Who we share data with
We do not sell your personal information and do not share it for cross-context behavioral advertising. We only use service providers that process data on our instructions:
- Ligne Web Services (LWS, France): hosting of the site, server and database, and email delivery;
- Anthropic (Claude, United States): automated analysis of the statement text, after card and account numbers are masked;
- Stripe (United States / Ireland): subscription payments; Stripe processes your card details, which we never see;
- Brevo (France): delivery of account and reminder emails.
We may also disclose information if required by law or to protect our rights and users.
5. Where your data is stored
Your account data is stored on servers in France. By using the service, you understand that your information is transferred to and processed in France and the United States, with appropriate safeguards.
6. How long we keep it
- Bank statement: not kept (deleted at the end of the scan).
- Account and tracked subscriptions: while your account is active; fully deleted when you close it.
- Masked subscriptions from the free scan: while your account is active, if you agreed to keep them.
- Billing records: 10 years, to meet our accounting obligations.
- Technical logs: 12 months at most.
7. Your rights
Wherever you live in the United States, you can ask us to access, correct, delete or receive a copy of your personal information, by writing to juridique@dev-altitude.com. We answer within 30 days, and we will never discriminate against you for exercising these rights. Residents of California and other states with privacy laws (such as the CCPA/CPRA) benefit from these rights as provided by those laws; you may also use an authorized agent.
You can edit your profile and turn off reminder emails from your Profile or with the link in each email.
8. Cookies and tracking
DropMySubs uses no advertising, analytics or tracking cookies. The only cookie is the session cookie, strictly needed to keep you signed in. We do not track you across other websites, so we do not respond differently to "Do Not Track" signals.
9. Children
The service is not intended for anyone under 18, and we do not knowingly collect data from children.
10. Security
Connections are encrypted (HTTPS), passwords are hashed, and access to data is limited to what the service needs. Each user can only access their own data. No method is 100% secure, but we take reasonable measures to protect your information.
11. Changes
We may update this policy. The date of the last update is shown at the top of the page; for material changes, we will notify you by email.
12. Contact
Trait Numérique SAS, 41 rue Aglophile Fradin, 86100 Châtellerault, France · juridique@dev-altitude.com