Privacy Policy

Last updated: June 23, 2026

RecoveryMRR ("we", "us", or "our") operates the recoverymrr.com website and the RecoveryMRR Stripe App. This policy explains what data we collect, how we use it, and your rights.

1. Data we collect

When you install and configure the RecoveryMRR Stripe App, we collect:

• Stripe account and user IDs — provided automatically by the Stripe App platform to identify your account.
• Configuration you enter — your SaaS name, sender display name, support reply-to email address, and (optionally) your Resend API key. The Resend API key is stored encrypted at rest.
• Stripe webhook events — payment failure and retry events that Stripe sends to our service so we can trigger dunning sequences on your behalf.
• Email send records — a log of dunning emails sent, including recipient address (your customer's email) and send timestamp, used to display your dashboard stats.

We do not collect browsing data, cookies, or any information about your customers beyond what is necessary to send the dunning emails you configure.

2. How we use your data

• To send automated dunning emails to your customers on your behalf when a payment fails.
• To display your recovery statistics in the Stripe App panel.
• To maintain your account configuration and preferences.

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Third-party services

We rely on the following sub-processors:

• Stripe — payment infrastructure and app platform. Stripe receives webhook events and payment data per their own privacy policy.
• Resend — email delivery. When you provide a Resend API key, emails are sent through your Resend account. If you do not provide a key, emails are sent via our default Resend account. Resend's privacy policy governs email data in transit.
• Cloudflare — our infrastructure runs on Cloudflare Workers and D1. Data is processed and stored in Cloudflare's network per their privacy policy.

4. Data retention

We retain your configuration and email logs for as long as your account is active. If you uninstall the RecoveryMRR Stripe App, you may request deletion of all associated data by contacting us at the address below.

5. Security

All data is transmitted over HTTPS. Resend API keys are encrypted at rest. We follow industry-standard practices to protect your information, but no method of transmission or storage is 100% secure.

6. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within 30 days.

7. Changes to this policy

We may update this policy from time to time. We will post the revised version here with an updated date. Continued use of the service after changes constitutes acceptance.

8. Contact

Questions or data requests: [email protected]