Privacy Policy

What we read, what we store, and how to delete it. Last updated June 2026.

What we read from Stripe

Via Stripe Connect OAuth (revocable in your Stripe dashboard) we read: invoices (amounts, status, customer email/name, hosted invoice URLs), subscriptions and their default payment method's expiry month/year and card fingerprint (for expiring-card warnings). We never read or store full card numbers and we never move money.

What we store

• Your account: email address, org settings, email copy you write.
• Tracked failed invoices: amount, status, customer email, timestamps.
• Email logs: what we sent, to whom, delivery/open/bounce status.
• Opt-outs: customer emails that unsubscribed (kept to honor the opt-out).

Your customers' rights

Every email we send contains a one-click unsubscribe honored instantly. A spam complaint suppresses the address automatically.

Retention & deletion

Delete your account in Settings: org data (invoices, email logs, reports, settings) is hard-deleted immediately. Aggregated, non-identifying numbers may survive in backups for up to 30 days.

Subprocessors

See the Subprocessors page for the current list (Vercel, Supabase, Inngest, Resend, Stripe).

Contact

privacy@recoupe.xyz