Privacy Policy

Creator Dunning ("we", "us") is a service operated by Joshua Johns that helps creators recover failed subscription payments processed through Stripe. This policy explains what we collect, why, and how it is handled.

What we collect

From creators who sign up: your email address, a password (stored only as a hash by our authentication provider), and, once you connect Stripe, your Stripe account ID, business name and the permissions Stripe grants us.

From your connected Stripe account: subscription and invoice events, and for each subscriber the customer name, email address, subscription status, billing period, payment attempt count and a link to the open invoice. We do not receive or store card numbers or bank details.

Standard technical logs (IP address, browser, timestamps) are kept by our hosting provider for security and debugging.

How we use it

To email subscribers on your behalf when a payment fails and to send follow-up reminders until the invoice is paid, to show you the status of those subscribers in your dashboard, and to operate, secure and improve the service. We do not sell personal data and we do not use subscriber data for advertising.

Emails to subscribers

Recovery emails are sent from billing@mail.finishradar.com with your business name as the sender name and your account email as the reply-to address, so subscribers can reach you directly. Emails stop as soon as the invoice is paid or the subscription ends, and after 30 days at the latest.

Who we share data with

We rely on a small number of processors to run the service: Stripe (payments and account connection), Supabase (database and authentication), Vercel (hosting) and Resend (email delivery). Each only receives the data needed for its function. We disclose data otherwise only when required by law.

Retention and deletion

Subscriber records are kept while your Stripe account is connected. Disconnecting Creator Dunning from your Stripe dashboard stops all processing immediately; email thejoshuajohns@gmail.com and we will delete your account and all associated subscriber data within 30 days.

Security

Data is encrypted in transit and at rest by our providers. Access to your Stripe account is limited to the scope you approve during connection and can be revoked by you at any time from Stripe.

Your rights

You can request a copy, correction or deletion of the personal data we hold about you or your subscribers by emailing thejoshuajohns@gmail.com. Subscribers who receive our emails can contact the creator directly via the reply-to address or contact us at the same email.

Changes

We will post any changes to this policy on this page and update the date above.