Your inbox stays yours.
The plain-English version of what we collect, why, on what legal basis, how long we keep it, and your rights under UK GDPR.
Last updated · 29 July 2026
Who we are
Subzero.money is a trading name of Saigo Limited ("Subzero", "we", "us"), a company registered in England and Wales under company number 15603435. We are the data controller for personal data processed through subzero.money and the Subzero web app.
- Registered office: 3b Lockheed Court, Preston Farm Industrial Estate, Stockton-on-Tees, England.
- Companies House number: 15603435.
- Contact: privacy@subzero.money for anything data-protection related.
What we collect and why
Purpose
Legal basis
Purpose
Legal basis
Purpose
Legal basis
Purpose
Legal basis
Purpose
Legal basis
Purpose
Legal basis
Purpose
Legal basis
We do not read personal email content. Our extractor only inspects messages that look like receipts, and it stores structured fields, not the message body.
What we never do
- We do not sell your data.
- We do not share it with advertisers or data brokers.
- We do not use your inbox contents to train AI models.
- We do not scan for anything other than receipt-shaped emails.
Where your data lives
Personal data is stored in the European Union on infrastructure operated by our processors (see subprocessors below). Data is encrypted in transit (TLS) and at rest. Access is scoped to the systems that need it to keep Subzero running, and every row is fenced from other accounts by row-level security.
Subprocessors
Role
Region
Role
Region
Role
Region
Role
Region
Role
Region
Role
Region
International transfers
Where a subprocessor may process data outside the UK / EEA (for example, US-based AI providers), transfers rely on the UK International Data Transfer Addendum together with the EU Standard Contractual Clauses, plus supplementary technical measures (encryption, minimisation, access controls). A copy of the relevant transfer mechanism is available on request.
How long we keep it
Retention
Retention
Retention
Retention
Retention
Retention
Retention
Cookies
We use a small set of first-party cookies. Non-essential cookies are only set with your consent. See the cookie policy for the full list, or open to change your mind.
Your rights
Under UK GDPR you have the right to:
- Access a copy of your personal data.
- Rectify anything that's inaccurate.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Port your data to another service in a machine-readable format.
- Withdraw consent for anything based on consent, at any time.
Most of these are one click away in Settings. For anything else, email privacy@subzero.money and we'll respond within 30 days.
Complaints
If you think we've mishandled your data, please talk to us first — but you also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Automated decisions and profiling
Subzero uses AI to extract structured fields from receipt-shaped emails. This is not a decision that produces legal or similarly significant effects for you — it's a labelling step you can override, correct or delete at any time.
Children
Subzero is not directed at children under 16. If you believe a child has created an account, please contact us and we'll remove it.
Changes to this policy
Material changes are announced by email at least 14 days before they take effect. The current version is dated at the top of this page.
Contact
privacy@subzero.money — for anything you want us to change, remove or clarify.
