Privacy policy
This policy covers the free churned revenue audit run by Winback. It is short on purpose. For technical details, see the security page.
Who is responsible
For your own details (email, company), we are the controller. For data about your customers that we read from Stripe, you are the controller and we process it on your behalf, only to produce your audit.
What we collect
- Your email address and, if you give it, your company name and role.
- Marketing parameters from the link you arrived through (for example utm_source), and which page you came from.
- From Stripe, read-only: customers, subscriptions, invoices, products and prices. We keep aggregates and, for 14 days, an encrypted list of former customers (ID, name, email, last plan, churn date, reason, score).
Why
- To run the audit you asked for and email you the result.
- To follow up if you ask for a pilot.
- To understand which channels bring people to the audit, in aggregate.
How long
- Stripe key: deleted when the audit finishes or fails.
- Win-back list: deleted after 14 days unless you sign up.
- Aggregates, your email and company: until you delete the audit or ask us to.
Your choices
Use the Delete my audit now button on your report, or write to support@winback.example to access, correct or delete your data. We never sell data and never contact your customers unless you start a pilot and approve the messages.
Subprocessors
Supabase (database and sign-in), Vercel (hosting), Inngest (job scheduling), Resend (email).