Eyespender
Privacy Policy
How we collect, use, store, and protect your information when you use Eyespender.
1. Introduction
This Privacy Policy explains how Astericlabs LLP ("we", "us", "our") collects, uses, stores, and protects personal information when you use Eyespender ("the Service") - our subscription management platform, web application, and browser extension.
By creating an account or using the Service, you acknowledge this Policy. If you do not agree, please do not use Eyespender.
2. Data controller
Astericlabs LLP is the data controller for personal information processed through Eyespender.
For privacy-related requests, contact us at support@astericlabs.com.
3. Information we collect
We collect information you provide and information generated when you use the Service:
- Account details: name, email address, authentication credentials (passwords are hashed; we never store plain-text passwords).
- Profile and plan data: subscription tier, billing cycle, and account preferences.
- Subscription records: services you track, amounts, billing cycles, renewal dates, categories, and notes you enter.
- Vault data: usernames, passwords, and related fields you choose to store. Sensitive vault fields are encrypted on your device before transmission; we cannot read your vault passphrase or decrypt vault contents without your passphrase.
- Team and sharing data: household membership, invites, and shared subscription metadata where you use team features.
- Payment information: billing status and transaction references processed by Razorpay. Card and UPI details are handled directly by Razorpay; we do not store full payment instrument numbers.
- Extension usage: connection status between the browser extension and your account, and subscription data you choose to import from supported sites.
- Communications: support messages and email notifications you receive (e.g. renewal reminders, if enabled).
- Technical data: IP address, browser type, device information, cookies, and logs needed for security, fraud prevention, and service operation.
4. How we use your information
We use personal information to:
- Provide, maintain, and improve the Service.
- Authenticate you and manage your account.
- Process subscriptions, upgrades, and payments through our payment partner.
- Send transactional emails (e.g. account verification, renewal alerts you opt into).
- Provide customer support and respond to inquiries.
- Enforce our Terms, prevent abuse, and protect the security of our users.
- Comply with applicable law and lawful requests from authorities.
- Analyse aggregated, de-identified usage to improve product features (we do not sell your personal data).
5. Legal basis (where applicable)
Depending on your location, we rely on one or more of the following: performance of a contract (providing the Service you signed up for), legitimate interests (security, product improvement, fraud prevention), consent (where required, e.g. optional marketing), and legal obligation.
For users in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.
7. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or anonymise personal data within a reasonable period, except where retention is required for legal, tax, audit, or dispute-resolution purposes.
Backups may persist for a limited time before being overwritten.
8. Security
We implement technical and organisational measures including encryption in transit (HTTPS), access controls, and row-level security in our database. Vault passphrases and decrypted vault contents are not accessible to us.
No method of transmission or storage is 100% secure. You are responsible for keeping your account password and vault passphrase confidential.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, or restriction of your personal data, and withdraw consent where processing is consent-based.
To exercise these rights, email support@astericlabs.com. We may need to verify your identity before fulfilling a request. You may also update profile information in your account settings.
If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
11. Children
The Service is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
12. International transfers
Your data may be processed in India and in countries where our subprocessors operate. We ensure appropriate safeguards where required by law for cross-border transfers.
13. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be notified by email or in-app notice where appropriate.
Continued use after changes take effect constitutes acceptance of the updated Policy.
14. Contact
Questions about this Privacy Policy: support@astericlabs.com
Operator: Astericlabs LLP · https://astericlabs.com