1. Who We Are

SubSSwitch ("we", "us", "our") is operated by Q-CONSULT MARKETING LTD, located at 2, Ta' Ninu Triq Laqxija, Birkirkara, Malta (VAT: MT28140713). We operate the subscription management service at subsswitch.app and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR).

2. Age Restriction

Our Service is intended for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we become aware that we have collected data from a minor, we will take immediate steps to delete the account and all associated data.

3. Data We Collect

• Account data: name and email address from Google Sign-In or email registration
• Subscription data: service names, costs, and billing dates you manually enter
• Bank data: transaction history from connected bank accounts (with your explicit consent)
• Usage data: pages visited, features used, and session duration

4. How We Use Your Data

• To provide and improve the SubSSwitch service
• To send transactional emails (account confirmations, reminders)
• To send marketing communications (only with your explicit consent, which you can provide during registration by opting in)
• To analyse usage patterns and improve features
• We do not sell your data to third parties

You can withdraw your consent for marketing communications at any time via your Settings page or by clicking the unsubscribe link in any email.

5. Legal Basis (GDPR)

We process your data based on: (a) contract performance — to provide the service you signed up for; (b) legitimate interests — to improve our product and ensure security; (c) your explicit consent — for marketing communications and bank account connections.

6. Data Storage & Retention

Your data is stored on servers in the European Union (Ireland, eu-west-1) via Railway. We retain your data for as long as your account is active. Bank transaction data is retained for up to 12 months from the transaction date. Notification logs are retained for 6 months. Upon account deletion, all personal data is permanently and immediately removed.

7. Third-Party Services

We share data with the following third-party processors. We maintain Data Processing Agreements (DPAs) with all providers to ensure your data is handled in compliance with GDPR:

• Google OAuth — for authentication only
• Resend — for transactional and notification emails
• Railway — for hosting and database
• Enable Banking — for bank account connections (with your explicit consent)

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all data ("right to be forgotten")
• Export your data (data portability)
• Object to processing
• Restrict processing of your data in certain circumstances (e.g. while we verify a dispute about accuracy)

We will respond to all data subject requests within 30 days. You can exercise these rights directly from your Settings page — export your data, manage connected services, or delete your account. You can also contact us at support@subsswitch.app for assistance.

9. Cookies

We use only essential cookies for authentication (session token). The session cookie is stored for the duration of your browser session and expires when you sign out or after 30 days of inactivity. We do not use tracking or advertising cookies. When you first visit our site, a banner informs you about our cookie usage. You can dismiss it by clicking "Got it".

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33. If the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

11. Contact & Complaints

For privacy questions: support@subsswitch.app. You also have the right to lodge a complaint with your local data protection authority.

Q-CONSULT MARKETING LTD
2, Ta' Ninu Triq Laqxija
Birkirkara, Malta
VAT: MT28140713