Privacy Policy

When you create an account, we collect your email address and password. When you connect your Stripe account, we store your Stripe Account ID and access token to monitor failed payments on your behalf. We do not store your Stripe secret keys. We also collect data about failed payments and subscriptions synced from your connected Stripe account, including customer names, email addresses, payment amounts, and failure reasons.

We use your information to: • Provide and operate the Subfix service • Detect and retry failed payments on your behalf • Send dunning emails to your customers in your name • Display recovery statistics in your dashboard • Communicate with you about your account

We do not sell your data. We share data only with: • Stripe — to process payment retries and create billing portal sessions • Resend — to send dunning emails to your customers • Supabase — our database provider, where your data is stored securely

By using Subfix, you authorise us to process your customers' names and email addresses solely to send dunning emails on your behalf. We do not use your customers' data for any other purpose. Customers can contact us at the email below to request data deletion.

We retain your account data for as long as your account is active. Failed payment records are retained for 12 months. You can request deletion of your account and all associated data at any time by contacting us.

We use industry-standard security measures including encrypted connections (HTTPS), secure database storage via Supabase, and we never store Stripe secret keys. Access to your data is protected by row-level security policies.

If you have any questions about this Privacy Policy or want to request data deletion, please contact us at: privacy@getsubfix.com