Privacy Policy

Last updated October 19, 2026.

This policy explains what data the revenueleak.com service collects, why, who receives it, how long it is kept and how you control it. In short, we read your billing data only to produce your audit and the recovery you switch on, we never sell data, and you can ask for deletion at any time at [email protected].

1. Who runs the service

The revenueleak.com service is run by the administrator of the revenueleak.com service. For every question about privacy, data access or deletion, write to [email protected]. We answer by email.

2. Two kinds of data and two roles

The service handles two different kinds of data, and our role differs for each.

Account data is the data about you as a user of RevenueLeak. For this data the administrator decides why and how it is used, and acts as the controller.
Billing data is the data we read from the billing system you connect, which includes data about your own customers. For this data we act on your behalf and on your instructions, as a processor. You stay responsible for having a lawful basis to share it with us and for informing your customers.

3. Account data we collect

Your email address and a hash of your password. We never store the password itself.
The confirmation code status and the date you confirmed your email address.
The page where you signed up, the referring source and campaign parameters in the address, if present.
The inputs of the estimate you ran before signing up: monthly recurring revenue, customer count, billing system, business type and company name if you typed one.
Your IP address and browser user agent at signup and sign in, used for security and abuse prevention.
Your plan, billing history and invoices, and the requests you send to support.

4. Billing data we read when you connect a billing system

When you connect Stripe, Paddle, Chargebee, Recurly, Shopify or WooCommerce, we read through its official API, with read-only access you grant yourself.

Invoices, payment attempts, decline reasons and dunning status.
Subscriptions, plans, prices, quantities and proration records.
Coupons, discounts and their duration.
Refunds, disputes and their deadlines.
Customers as held in your billing system, such as name, email address and country.
For stores, orders, abandoned checkouts and subscription contracts.
For cards, only the brand, the last four digits and the expiry month and year. Full card numbers never reach us.

5. Why we use the data

To create and secure your account, confirm your email address and let you sign in.
To produce the leak audit, the ranked list of accounts to fix and the reports you export.
To run the recovery rules you switch on, such as retries and recovery emails to your customers.
To bill your subscription and send invoices and service messages.
To answer support requests and fix problems.
To understand which billing systems and revenue bands our users have, in aggregate, so we can improve the product.

We do not sell data, we do not use billing data for advertising, and we do not use your customers' data for any purpose other than your audit and your recovery.

6. Who receives the data

We share data only with service providers we need to run the service, under contracts that bind them to use it only for us.

A hosting provider that stores and processes data on servers in the European Union or the United States.
A payment processor that handles your subscription payments. It receives your payment details directly at checkout.
An email delivery provider that delivers our service messages and, when you switch them on, recovery emails to your customers.

We may also disclose data when the law requires it, for example to answer a valid court order.

7. Cookies

The service uses only essential cookies: a session cookie that keeps you signed in and a security token that protects forms. We use no advertising cookies, no tracking pixels and no third party analytics cookies.

8. How long we keep data

Billing data is kept while your account is open, so audits can be compared over time. When you disconnect a billing system or close your account, the connection is revoked at once and its billing data is deleted within 30 days.
Account data is kept while your account is open and deleted within 30 days after you close it.
Invoices and payment records are kept for as long as tax and accounting law requires.
Reports you exported stay with you.

9. How we protect data

Data is encrypted in transit and at rest. Connection keys are stored encrypted and are never shown again after you save them. Access inside our team is limited to what support needs, and every seat in your account has a role. More detail is on our security page.

10. Your rights

You can, at any time and without giving a reason, ask us to do any of the following by writing to [email protected] from the email address of your account.

Give you a copy of the data we hold about you.
Correct data that is wrong.
Delete your account and your data.
Restrict or object to a specific use of your data.
Give you your data in a machine readable format.

Residents of the European Economic Area, the United Kingdom and California have these rights under their local law, and we honor them for every user. You can also complain to your local data protection authority. Requests about your own customers' data held in your billing system should go to you, and we help you answer them.

11. Children

The service is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.

12. International transfers

Data may be processed in the United States and in the European Union. Where data leaves the European Economic Area, we rely on standard contractual clauses or an equivalent safeguard.

13. Changes to this policy

When we change this policy, we update the date at the top. If a change is significant, we tell account holders by email before it takes effect.

14. Contact

Questions about this policy go to [email protected].