What we store
What we keep
The aggregated result of your audit: totals, monthly breakdown, decline families, and anonymous customer references such as Customer #a1b2.
A one-way fingerprint of your Stripe account id, so we can tell two audits apart without knowing whose they are.
Your email address, only if you ask us to send you the report or you request early access.
What we never keep
Your Stripe API key. It lives in an encrypted cookie in your own browser for two hours at most, and is never written to our database or our logs.
Anything identifying your customers: no names, no email addresses, no billing addresses, no card data. Our code replaces every customer id with a short fingerprint before the data ever leaves the Stripe layer.
How long
You can delete an audit at any time from its own page, which also deletes anything linked to it.
Every audit is deleted automatically 90 days after it was run, along with anything linked to it. A scheduled job does this once a day; nothing older survives.