1. Information We Collect

a. Information You Provide

• Account details (name, email address, company name)
• Support communications and inquiries
• Billing contact information (note: payment data is processed directly by Stripe and is not stored by Recurr)

b. Information Collected Automatically

• Usage and event data (pages viewed, actions taken, timestamps)
• Technical information (IP address, browser type, device information)
• Referral and campaign metadata (where provided via integrations)

c. Customer End-User Data

When Recurr is used by our customers to operate subscription funnels, we may process limited end-user data on their behalf (for example, email address, subscription state, onboarding metadata, and purchase-related events). In these cases, Recurr generally acts as a data processor and our customer acts as the data controller.

2. How We Use Information

We use personal information to:

• Provide, operate, maintain, and improve the Recurr platform
• Authenticate users and manage accounts
• Process subscriptions and orchestrate onboarding flows
• Monitor performance, reliability, fraud prevention, and security
• Send service updates, technical notices, and support communications
• Comply with legal and regulatory obligations

We do not sell personal information.

3. Legal Bases for Processing (GDPR)

Where applicable, we process personal data under one or more of the following legal bases:

• Performance of a contract
• Legitimate interests (platform operation, analytics, and security)
• Compliance with legal obligations
• Consent, where explicitly obtained

4. Information Sharing

We may share personal information with third parties only as necessary to operate the service, comply with the law, or protect our rights. We may share information:

• With service providers and subprocessors who support our operations (e.g. hosting, email delivery)
• With Stripe for payment processing (Recurr does not store card data)
• When required by law, legal process, or lawful requests
• To protect the rights, safety, and security of Recurr, our users, or others
• In connection with a merger, acquisition, or sale of assets

A current list of subprocessors is available upon request.

5. International Data Transfers

Recurr operates globally. Your personal information may be transferred to and processed in countries outside your jurisdiction. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

6. Data Retention

We retain personal information only for as long as necessary to provide the service, meet legal, accounting, and compliance obligations, resolve disputes, and enforce agreements. Customer end-user data is retained according to our contractual obligations with customers.

7. Data Security

We implement appropriate technical and organisational measures designed to protect personal information, including access controls and secure infrastructure practices. However, no method of transmission over the Internet or electronic storage is 100% secure.

8. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete personal data
• Request deletion of your personal data
• Object to or restrict processing of your personal data
• Request portability of your personal data where applicable

To exercise these rights, contact us using the details below. If we process data on behalf of a customer (as a processor), we may direct you to the relevant customer (the controller) to action the request.

9. Cookies and Tracking

We use cookies and similar tracking technologies for authentication, analytics, and platform functionality. You can configure your browser to refuse cookies or alert you when cookies are being sent. Some features may not function properly without cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the “Last updated” date above.

11. Contact Us

If you have any questions about this Privacy Policy, or want to make a privacy-related request, contact us at privacy@recurr.dev.