Privacy policy
Access your data
Delete your data
Privacy policy
Cookie settings
Frequently asked questions
Have more questions about privacy? Reach us at [email protected].
Subtotal lets you securely share the purchase history from your retail accounts, like Walmart, Amazon, and Sephora, with the brands you choose. You stay in control of when your data is accessed and who it's shared with.
No. Subtotal never stores or has access to your retail account credentials.
When you connect to a brand, we share the purchases that include that brand's products, including products in the purchase that don't belong to the brand, just like when you share a receipt. Purchases that have nothing to do with the brand aren't disclosed.
We don't disclose sensitive personal data, such as health-related information.
Yes. Your data is encrypted at every step, we never store your credentials, and nothing is shared without your consent.
Email [email protected], as described in our End User Privacy Policy. We verify every request and respond promptly, as required by law.
Yes, at any time. You can disconnect from the same place you originally connected, or email [email protected] and we'll take care of it.
State privacy laws including the CCPA and CPRA, along with similar laws in Colorado, Connecticut, Virginia, and other states. We also align our practices with the GDPR and review them regularly as laws evolve.
Every connection is shopper-initiated. Your customer links their retail account through Subtotal's guided flow, sees what they're sharing and with whom, and can disconnect at any time. Nothing is shared until they complete that flow.
Verified purchases that include at least one of your products, along with connection events. You never receive a shopper's credentials, and we don't disclose sensitive personal information.
New data stops flowing immediately. Data you already received remains subject to your own privacy policy and applicable law.
Shoppers can send access, correction, and deletion requests to [email protected]. We verify each request and respond as required by law, and where a request affects data shared with your brand, we coordinate with you.