Draft. Review this before you connect a live Stripe account.
Privacy
Calmretry is a tool for the person who runs a small subscription business. This page says what we store, what we read from Stripe, and what goes away when you disconnect.
The Stripe key
You paste a restricted key that starts with rk_test_ or rk_live_. We refuse secret keys (sk_) and publishable keys. The key is stored encrypted (AES-256-GCM) with a server secret that is not in the database. We use it only to read. We do not create charges, update customers, or send Stripe's own emails.
With that key we read:
- Customers, including name, email, and the default payment method's brand, last four digits, and expiry.
- Subscriptions and their amounts, so we can estimate MRR.
- Invoices, including status, amounts, hosted invoice links, and whether a payment was attempted.
- Charges and payment intents, so we can read the decline code.
- Events, so we notice new failures, payments, voids, and cancellations.
- Product names, when you allow Products: Read. Invoice line descriptions are enough if you leave that off.
We do not read full card numbers. Stripe does not return them to a restricted key of this kind.
What we keep
A cache of those invoices and card expiries, the emails we send (recipient, subject, body, and whether it bounced), your templates, your founder name, reply-to address, timezone, and the customer portal link you paste. We also keep our own subscription record if you pay for recovery.
Email is sent from an address on our mail subdomain, through Cloudflare Email Sending or Resend, with your reply-to. We do not add open-tracking pixels. Payment for Calmretry itself goes through Lemon Squeezy. Your customers pay you on Stripe, not us.
Disconnect and deletion
Disconnect deletes the encrypted key, the invoice and card cache, the event cursor, and any recovery sequences that have not finished. The log of emails already sent stays, so you can still export it. Deleting the account removes that log, the templates, the subscription record, and the account itself.
Questions about this draft: hello@calmretry.com.