What GhostSubs accesses
With your permission, GhostSubs connects to your Gmail using Google's read-only scope (gmail.readonly). We only read messages; we never send, modify, or delete email, and we never see your Google password.
How we use it
We search for receipts and renewal notices and use Google's Gemini AI to identify subscriptions and extract structured details (service name, amount, billing cycle, next charge date). The contents of matching emails are sent to the Gemini API solely for this identification step.
What we store
- The extracted subscription data (service, amount, dates).
- Gmail message IDs of the source receipts, so you can open them and we can refresh details on demand.
- Your Google account email and a refresh token, which is encrypted at rest (AES-256-GCM).
We do not store the full contents or bodies of your emails, and we never ask for or store any bank or card details.
Sharing
We do not sell your data. Email content is processed by Google (Gemini) only for identification. We do not share your data with any other third parties.
Your control
You can disconnect at any time by signing out, and you can revoke GhostSubs' access from your Google Account permissions. To delete your stored data, contact us and we will remove it.