Privacy Policy

Last updated: April 30, 2026

This Privacy Policy describes how ChurnWire (“we”, “us”, or “our”) collects, uses, and protects your information when you use our website at churnwire.com and our churn detection service (the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Your email address
• Your name (if provided)

We use magic link authentication. We do not collect or store passwords.

1.2 Stripe Data (via Stripe Connect OAuth)

When you connect your Stripe account, we access the following data in read-only mode via Stripe’s OAuth integration:

• Subscription events (creations, cancellations, renewals, trials)
• Payment failure events (failed charges, past-due invoices)
• Customer information (names, email addresses)
• Payment method metadata (card brand and last 4 digits only)
• Invoice and billing cycle data

We do not access, collect, or store:

• Full credit card numbers or CVVs
• Bank account details or routing numbers
• Stripe account balances or payout information
• Sensitive financial credentials

1.3 Usage Data

We collect basic usage data to operate and improve the Service:

• Pages visited within ChurnWire
• Features used (e.g., dashboard views, report exports)
• Browser type and device information
• IP address (for security and abuse prevention)

1.4 Cookies

We use session cookies only for authentication purposes. We do not use tracking cookies, analytics cookies, advertising cookies, or third-party cookies. See our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Connect to your Stripe account, process subscription and payment data, and calculate churn risk scores for your customers.
• Send notifications: Deliver daily churn digest emails and magic link authentication emails.
• Improve the product: Analyse aggregate usage patterns to improve features and performance.
• Communicate about your account: Send service-related announcements, security alerts, and policy updates.

We do not use your information for advertising, marketing to third parties, or building user profiles for sale.

3. Stripe Connect Data

3.1 How We Access Stripe Data

We access your connected Stripe account via Stripe Connect OAuth. You explicitly authorise this connection during setup, and you can revoke access at any time from your Stripe dashboard or from within ChurnWire.

3.2 Permissions and Scope

Our Stripe integration operates with read-only permissions. Specifically:

• We can read subscription events, payment failure events, customer names and emails, card brand and last 4 digits, and invoice data.
• We cannot charge your customers, modify subscriptions, issue refunds, access your bank account or balance data, or perform any write operations on your Stripe account.

3.3 Purpose of Stripe Data Access

All Stripe data accessed through our integration is used solely to calculate churn risk scores and surface actionable insights within the ChurnWire dashboard. We do not use your Stripe data for any other purpose.

4. Data Storage and Security

• Hosting: Data is stored in PostgreSQL databases hosted on Railway, with infrastructure located in the EU and US.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
• OAuth token encryption: Stripe OAuth tokens are encrypted at rest using AES-256-GCM.
• Session security: User sessions are managed via secure, httpOnly cookies that cannot be accessed by client-side scripts.
• No data sales: We do not sell, rent, or trade your personal data or Stripe data to any third party.

5. Data Retention

• Active accounts: Your account data and connected Stripe data are retained for as long as your account is active and you maintain an active Stripe connection.
• Stripe disconnection: When you disconnect your Stripe account from ChurnWire, all associated Stripe data (customer records, subscription events, churn scores) is deleted within 24 hours.
• Account deletion: When you delete your ChurnWire account, all of your data (account information, connected Stripe data, usage data) is permanently deleted within 30 days.
• Backups: Backup data is purged on the same schedule as primary data deletion.

6. Third-Party Services

We use the following third-party services to operate ChurnWire:

We do not use any analytics SDKs (e.g., Google Analytics), advertising networks, or data brokers.

7. Data Sharing

We do not share your personal information or Stripe data with third parties except:

• Service providers: As listed in Section 6, solely to operate the Service.
• Legal requirements: If required by law, regulation, legal process, or governmental request.
• Protection of rights: To protect the rights, property, or safety of ChurnWire, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case you will be notified before your data is transferred and becomes subject to a different privacy policy.

8. Your Rights

You have the right to:

• Access your data: View the personal information and Stripe data we hold about you within the ChurnWire dashboard.
• Correct your data: Update your account information at any time.
• Export your data: Download your churn data and reports via CSV export from the dashboard.
• Disconnect Stripe: Revoke ChurnWire’s access to your Stripe account at any time, either from your Stripe dashboard or from within ChurnWire. Associated data will be deleted within 24 hours.
• Delete your account: Request complete deletion of your account and all associated data at any time. Deletion is completed within 30 days.

To exercise any of these rights, you can use the in-app settings or contact us at [email protected].

9. Children’s Privacy

ChurnWire is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at [email protected].

10. International Data Transfers

Your data may be processed and stored in servers located in the EU and the United States. By using the Service, you consent to the transfer of your data to these locations. We take appropriate measures to ensure your data is treated securely and in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email at the address associated with your account before the changes take effect. We will also update the “Last updated” date at the top of this page.

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, you can contact us:

• Email: [email protected]
• Website: churnwire.com