Privacy Policy

What we collect

Gmail address hash — When you confirm your Gmail account, we store a one-way SHA-256 hash of your email address to enforce free tier limits (5 unsubscribes/month). This hash cannot be mathematically reversed to obtain your email address.

Email snippet — When you click Unsubscribe on an email, a short excerpt of that email (sender name, subject line, and unsubscribe link) is sent to our server and processed through Claude AI to identify the best unsubscribe URL. This content may appear in temporary server logs for up to 7 days.

Unsubscribe page content — The HTML of the unsubscribe page you are being redirected to is sent to Claude AI to determine what actions to take (clicking buttons, filling forms). This content is processed in real time and never stored.

What we do NOT collect

• We do not access your full inbox or any emails beyond the one you are actively unsubscribing from
• We do not require Google OAuth or any form of login
• We do not store your email content permanently
• We do not collect passwords, payment details, or authentication data
• We do not track your browsing history or web activity
• We do not use cookies or cross-site tracking

How we use your data

Data collected is used solely to provide the unsubscribe functionality:

• Your Gmail hash is used to count monthly unsubscribes and enforce free tier limits
• Email snippets are used only to identify which unsubscribe URL to visit
• Unsubscribe page HTML is used only to determine what buttons/forms to interact with

Third parties

We use the following third-party services to operate UnsubAI:

• Anthropic Claude API — processes email snippets and unsubscribe page content to perform AI-powered unsubscribing. Anthropic's privacy policy applies to data sent through their API.
• Supabase — stores anonymized usage counts (hashed Gmail address + count only). No email content is stored here.
• Railway — hosts our backend server. Server logs may temporarily contain email snippets for up to 7 days.

We do not sell, rent, or share your data with any other third parties.

Data retention

• Server logs: deleted automatically after 7 days
• Usage counts: reset monthly, stored indefinitely as anonymous hashes
• Email content: never stored — processed in real time only

Your rights

You can request deletion of your usage data at any time by contacting us. Since we only store a hash of your email (not the email itself), please include your Gmail address in the request so we can identify and delete your record.

Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.

Contact

For privacy questions or data deletion requests:
abhinav10251@gmail.com