Privacy Policy

What Rewind does

Rewind is a price drop refund finder. It connects to your Gmail account (read-only), scans for purchase confirmation emails from major retailers, tracks whether those items drop in price, and drafts refund claim emails for you to review and send.

What data we access

When you connect your Gmail account, Rewind requests read-only access. We use the following Gmail search query and nothing else:

• Emails from known retailer addresses (Target, Walmart, Best Buy, Kohl's, Macy's, Nordstrom, Home Depot, and similar retailers)
• Subject lines containing terms like "order confirmation," "receipt," or "shipped"
• Emails from the last 90 days only

We never access, read, or process any other emails — not personal emails, not marketing emails, not anything outside the query above.

What data we store

From your purchase confirmation emails, we extract and store only:

• Retailer name and domain
• Product name and URL
• Price paid and order date
• Order number
• Last four digits of payment card (if shown in the email)

We do not store the full text or content of your emails. We do not store email body text, attachments, or any content beyond the purchase details listed above.

How we use your data

We use your purchase data exclusively to:

• Track current prices against what you paid
• Detect price drops within retailer refund windows
• Draft refund claim emails for your review
• Show you your refund history and total savings

We do not use your data for advertising, profiling, or any purpose beyond operating the Rewind service.

Data sharing

We do not sell, rent, or share your personal data with third parties. The only external services that touch your data are:

• Supabase — our database provider, used to store your account and purchase data securely
• Apify — used to check current prices on retailer websites. We send only product URLs, never your personal information
• Anthropic (Claude) — used to parse receipt emails and draft claim emails. Email text is sent to Claude for processing and is not retained by Anthropic beyond the API call
• Stripe — used to securely process payment for our commission fee, if you choose to save a payment method. We never see or store your full card details — Stripe handles this directly
• Resend — used to send you email notifications about price drop opportunities
• Sentry — used internally to detect and fix technical errors. Sentry never receives your email content or Gmail data

Your Gmail access

Rewind uses Google OAuth 2.0 with read-only Gmail scope (gmail.readonly). This means:

• We can never send, delete, or modify any emails
• We can never access emails outside our specific search query
• You can revoke access at any time from your Google Account settings at myaccount.google.com/permissions

Data retention and deletion

You can delete your Rewind account and all associated data at any time from the Privacy section of the app. Deletion is permanent and immediate. We retain no copies of your data after deletion.

Security

Your Google OAuth tokens are encrypted at rest. We use industry-standard security practices to protect your data. We never log or store the contents of your emails.

Children's privacy

Rewind is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

If we make material changes to this privacy policy, we will notify you by email before the changes take effect.

Contact

Questions about this privacy policy? Email us at privacy@rewindsavings.com