Privacy policy

Last updated October 1, 2026

The short version: we collect your email and the subscriptions you add, so we can show your totals, reminders and ways to save. We never ask for bank or card details. Your data is stored in Canada. We don't sell it or use it for ads. You can see, change or delete it at any time.

Contact us

Castor (heycastor.ca) is based in British Columbia, Canada. For any privacy question, request or concern, contact our Privacy Officer at privacy@heycastor.ca.

What we collect

• Your account: your email address, and the date you agreed to this policy. Your password is handled by our login provider. It's stored scrambled (hashed), so we can't see it.
• The subscriptions you add: names, prices, billing cycle, how you pay (for example "directly" or "through Bell"), and any dates you enter (renewals, free trials, promo end dates).
• Your choices in the app: which price alerts you've dismissed (saved to your account), and which money-saving tips you've dismissed (saved only in your browser, on that device).
• When you use "Skip the typing" (reading a bill): see the next section.
• Technical information: our providers automatically record things like your IP address, browser type and the time of each request, to keep the service running and secure. Your browser also stores a login token so you stay logged in. We don't use advertising or tracking cookies, and we don't use analytics tools.

We don't collect bank or card details, account numbers, your address, or logins to any other service. Please don't type those into subscription names.

Reading your bill

If you choose to add subscriptions from a photo, PDF or pasted text of a bill:

• It's sent securely to an AI service provider, which reads it and returns only the subscriptions it finds (names, prices, billing cycles and dates). You check them before anything is saved.
• We don't keep the photo, file or text. Only the details you choose to add are saved.
• The AI service may process it outside Canada, mainly in the United States. Under its terms with us, it doesn't use it to train its AI models and keeps it only briefly.
• We keep a small log of each request (the time, the type of file, how many subscriptions were found, and how much processing it used), to apply fair-use limits and keep track of our costs. The log never includes the bill itself.

This feature is optional. You can always type your subscriptions in instead.

Why we use it

• To let you log in and keep your list private to you.
• To calculate your totals and show reminders, price change alerts and possible ways to save.
• To fill in subscriptions from a bill, when you ask us to.
• To keep Castor secure, prevent abuse, and fix problems.
• To email you about your account (for example, confirming your email or resetting your password). We'll only send other emails, like price alerts, if you turn them on.

We don't sell your information, rent it, or use it for advertising. If we ever want to use it for something new, we'll ask you first.

Who we share it with

Only the service providers that help us run Castor, and only what each one needs:

• Our database and login provider: stores your account and subscriptions on servers in Canada. Some behind-the-scenes processing may happen outside Canada.
• An AI service provider: reads bills, only when you use that feature (see above).
• Website delivery services: help load the site quickly and securely, and receive the basic technical information any website receives, like your IP address.

We may also share information if the law requires it.

Information processed outside Canada

Some of our providers may process information in other countries, mainly the United States. While it's there, it's protected by our agreements with those providers, but it may be accessible to courts and authorities in that country under their laws.

How long we keep it

• Your subscriptions stay until you delete them, or delete your account.
• When you delete your account, everything linked to it (your account, subscriptions, dismissed alerts and the bill reading log) is deleted. Copies in our providers' backups are removed as those backups expire.
• Our providers keep technical logs for a limited time, under their own policies.

How we protect it

• All connections are encrypted (HTTPS).
• The database only lets each person see and change their own information, and we test this regularly.
• Access to the systems behind Castor is strictly limited.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we'll tell you and the Privacy Commissioner, as the law requires.

Your choices and rights

• See and correct your information: everything you've added is on your subscriptions page, where you can edit it.
• Download it: on the "Your account" page, download everything we have about you in one file.
• Delete it: delete any subscription at any time, or delete your whole account yourself on the "Your account" page. It's deleted right away. You can also email us to do it for you.
• Ask what we hold: email us and we'll answer within 30 days.
• Withdraw your consent: you can stop using Castor and delete your account at any time.

If you're not happy with how we handled a privacy concern, please tell us first. You can also complain to the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for BC.

Children

Castor is meant for adults managing their own subscriptions. It isn't designed for children.

Prices and savings

The plan prices Castor shows come from public sources and are checked by us before they appear. They're not personal information. Savings are estimates, and your actual price may differ.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how we use information you've already given us, we'll tell you and, where needed, ask for your consent again.