Privacy policy

What we collect

• Your account. Your email address and, if you sign in with Google, your Google account name and email.
• Bank data, if you connect a bank. Balances and transactions, received through Plaid. Connecting a bank is optional; you can skip it and enter bills yourself.
• Email, if you connect Gmail. Reading uses Google’s read-only scope. We use it to find bills, receipts and replies from merchants. We keep a few extracted facts per bill (merchant, amount, date) and delete the message body 72 hours after it arrives, whether or not we finished reading it.
• Permission to send negotiation emails, only if you grant it. When a negotiation needs to email a merchant from your own address, we ask you separately for Google’s send-only permission. It lets us send a message and nothing else — it gives no further access to your mailbox. You can revoke it in your Google account at any time.
• Google’s rules for that data. Reclaimd’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• What you tell us. Bills, income, obligations, and the authorizations you sign so we can act for you.
• Sign-in details for cancellations, only if you ask us to cancel something. These are encrypted and can be decrypted only by an isolated automation process that signs in as you to carry out the cancellation. A stored credential that goes unused for 90 days is deleted automatically.
• Call recordings. When one of our callers phones a merchant for you, the call is recorded for quality review. Any part of a call where you verify your identity directly with the merchant is not captured.
• Payment. Your subscription is billed through Stripe. Card details go to Stripe, not to us.
• Your town. The town of your service address, if you give it, used to find local businesses that could quote you a lower price, and the phone number on the Google listing of a local business you pay when we need to call it.
• Family members’ bills, if you use Reclaim Family. If you manage bills for someone else, information about their bills is handled under this policy in the same way as your own.
• Waitlist sign-ups. If you join the waitlist on our front page, we keep your email address so we can tell you when you can start.

How we use it

To find your recurring bills, negotiate them down, track each concession until it expires, negotiate again before the price reverts, and show you what you have saved. We also use it to run the service: sending you notices, billing you, and checking the quality of calls made on your behalf.

What we never do

• We never give your PIN or password to a merchant, and never ask a merchant for one, when negotiating for you.
• Nobody at Reclaimdai LLC sees your PINs or passwords — not our negotiating software and not the person who calls for you. Callers see a fixed list of fields about your account and never your mailbox.
• No staff tool displays the body of your email.
• We never use your email or bank data to train AI models, and never for advertising.
• We never delete, label, archive or file anything in your inbox.
• We never send email from your account unless you have granted send permission, and then only negotiation and quote-request messages that start from a draft you read and approved, the follow-ups in the same email thread, and the decisions you ask us to pass on.
• We do not sell your data, show ads, take affiliate or referral money, or use an analytics vendor. Your subscription is how we are paid.

How we protect your data

• Encrypted in transit. Every connection between your browser and Reclaimd, and between Reclaimd and Google, Plaid and the other services listed below, uses HTTPS (TLS).
• Encrypted at rest. Our database and its backups are stored encrypted (AES-256) by our hosting provider.
• Your Google and bank access tokens are sealed one by one. Each token is encrypted with its own key (AES-256-GCM), and that key is itself encrypted by a master key held in AWS Key Management Service. The master key never leaves AWS, and only the parts of our service that need a token are permitted to unlock it. Nothing that can open a token is stored beside it.
• Sign-in details for cancellations are kept apart. They are encrypted under a different master key and can be unlocked only by the isolated automation process that carries out the cancellation.
• We keep as little as we can. Gmail access is read-only, and sending uses the separate send-only permission. We keep a few facts per bill and delete each email body 72 hours after it arrives.
• Limited access inside Reclaimd. No staff tool can display an email body. Internal screens are open only to named administrators, and the people who call merchants for you see a fixed list of fields, never your mailbox.
• Logs are scrubbed. Before anything is written to our logs, email content, tokens, account numbers, email addresses and phone numbers are removed from it.
• Your sign-in. Passwords are stored only as salted, one-way hashes (scrypt), never as the password itself, and a signed-in session ends after 30 days.
• You can cut access at any time. Disconnecting Gmail in Settings revokes Reclaimd’s access at Google as well as deleting the stored token, and deleting your account removes your records.
• If we learn that your data has been accessed without authorization, we will tell you promptly and as the law requires.

Who else handles it

We share data only with the services that run parts of the product for us:

• Plaid — bank connections.
• Google — sign-in, Gmail access as described above, and Google Places for local quotes and local businesses’ phone numbers.
• Kit — our mailing list. Your email address is sent when you join the waitlist or create an account, and nothing else.
• Resend — the emails that sign you in. Your email address and the link.
• A web search provider — researching merchants’ current prices.
• Anthropic — the AI model that reads bills and merchants’ replies and drafts negotiation messages. Under its commercial terms Anthropic does not train its models on what we send it.
• Browserbase — a hosted web browser we use to read merchants’ public websites and, when a step needs you, to show you the merchant’s own page.
• Twilio — phone calls to merchants.
• Stripe — payments.
• Our hosting and encryption-key providers — storage and key management.

We also tell the merchants we negotiate with what they need to know to act on your account, and we disclose information when the law requires it.

How long we keep it

• Email bodies: 72 hours.
• Unused cancellation credentials: 90 days.
• Bank connections: if you do not use Reclaimd for 30 days, we disconnect your bank at Plaid.
• Everything else: for as long as your account is open, until you delete it.

Your choices

• You can skip connecting a bank or Gmail and still use the parts that do not need them.
• You can disconnect a bank or Gmail at any time in Settings.
• Export: Settings → Data gives you everything we hold about you in one file.
• Delete: Settings → Data deletes your account and its records. They are removed, not just hidden.

Changes and contact

If we change this policy in a way that affects you, we will email you before the change takes effect. Questions or requests go to alexanderallain72@gmail.com, or by mail to: