Account data
We process your name, work email, password hash, workspace name, session data, notification settings, and your recorded acceptance of the Terms and Privacy Policy.
Stripe billing data
When you connect Stripe, MRRdue imports the billing metadata needed to generate revenue leak reports and recovery queues: Stripe customer identifiers, names and emails when present, subscriptions, products, prices, invoices, invoice amounts, currencies, statuses, retry counts, failure reasons, hosted invoice links, webhook event IDs, and recovery activity.
Data we do not collect
MRRdue does not ask for or store card numbers, CVCs, full bank account numbers, raw payment method details, refund permissions, payout details, or credentials for your own customers. Restricted Stripe keys are encrypted at rest, are used only on the server, and are never returned to browser JavaScript.
Dodo Payments billing
MRRdue subscriptions are intended to be billed through Dodo Payments. Dodo Payments may process checkout, payment, tax, invoice, and subscription records for your MRRdue account. Your customers' Stripe data is separate from MRRdue's own subscription billing.
Recovery notes and templates
Manual case notes that you add to MRRdue are stored in your workspace timeline. Recovery email templates are copied by you; MRRdue does not send automated customer recovery campaigns in V1 or V1.5.
Security and retention
We use application-level encryption for stored Stripe restricted keys, verify Stripe webhook signatures, scope records to workspaces, and keep local environment files out of source control. Imported Stripe data is retained while your workspace uses the service unless you disconnect Stripe, request deletion, or delete imported data through available product controls.
Your controls
You can disconnect Stripe from settings. Disconnecting removes the stored restricted key. Depending on your selected option, imported reporting data may be retained for audit history or deleted from the workspace.
Cookies and similar technologies
MRRdue uses essential session cookies to keep you signed in. We may also set a short-lived referral attribution cookie when you arrive through a referral link. We do not use third-party advertising trackers in the product today.
Service providers
MRRdue may use infrastructure, database, email delivery, authentication support, Stripe APIs for read-only billing data, and Dodo Payments for MRRdue subscription billing. These providers process data only as needed to operate the service.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete personal data we hold about you. You can disconnect Stripe, delete imported data, or close your account through product controls where available. For other requests, contact us at the email below and we will respond within a reasonable time.
Changes to this policy
We may update this Privacy Policy as MRRdue changes. When we make material updates, we will revise the effective date above and, where appropriate, notify you by email or in-product notice.
If you connect a Stripe account, you confirm that you are authorized to process that workspace's billing data in MRRdue.