Privacy Policy

1. Who we are

ChurnHalt ("we", "us", "our") is the data controller responsible for your personal data. We are based in England and can be contacted at hello@churnhalt.com.

2. What data we collect

We collect the following categories of data:

• Account data: email address and password (hashed) when you create an account
• Stripe API key: your read-only restricted API key, encrypted at rest using AES-256
• Subscription metadata: plan names, amounts, statuses, start/end dates, coupon usage, and trial information fetched from Stripe. We do not store customer names, email addresses, or payment card details
• Billing data: payment and subscription information processed by Stripe for your ChurnHalt subscription
• Usage data: basic analytics such as pages visited, feature usage, and session information

3. How we use your data

We use your data to:

• Provide the Service: analyse your Stripe subscription data and generate churn insights
• Manage your account and process billing
• Send you service-related communications (account notifications, billing receipts)
• Improve the Service based on usage patterns

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

• Contract: processing necessary to provide the Service you have signed up for
• Legitimate interest: improving the Service and ensuring its security
• Legal obligation: where we are required to retain data for tax, accounting, or regulatory purposes

5. Data sharing

We do not sell your data. We share data only with the following categories of service provider, each acting as a data processor on our behalf:

• Hosting: cloud infrastructure provider for running the Service
• Stripe: for processing your ChurnHalt subscription payments
• Email: transactional email provider for account notifications

Some of these providers may process data outside the UK. Where this is the case, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or UK adequacy decisions).

6. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, we will delete your data (including your encrypted API key and all analysed subscription data) within 30 days of the end of your billing period. We may retain basic account information and billing records for up to 6 years to comply with tax and accounting obligations.

7. Data security

We take the security of your data seriously. Measures include: encryption of API keys at rest (AES-256), HTTPS for all data in transit, restricted database access, and regular security reviews. No system is perfectly secure, but we are committed to protecting your data using industry-standard practices.

8. Your rights

Under UK data protection law, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your data
• Portability: request your data in a machine-readable format
• Restriction: ask us to restrict processing of your data
• Objection: object to processing based on legitimate interest

To exercise any of these rights, email us at hello@churnhalt.com. We will respond within 30 days.

9. Cookies

We use essential cookies to keep you signed in and maintain your session. We do not use third-party advertising or tracking cookies. If we introduce analytics cookies in future, we will update this policy and obtain your consent where required.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service. The "last updated" date at the top of this page will always reflect the most recent version.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the opportunity to address your concerns first, so please contact us at hello@churnhalt.com.

12. Governing law

This Privacy Policy is governed by the laws of England and Wales.