Privacy Policy

Last updated: March 10, 2026

1. What Information Do We Collect?

Information you provide directly

We collect personal information that you voluntarily provide when you register for an account, subscribe to our Services, or contact us. This may include:

• Name and email address
• Account credentials (username and password)
• Billing address and payment information
• Contact preferences

All payment data is processed and stored by Stripe. We do not directly store credit card numbers or bank account details. You can review Stripe's privacy notice at https://stripe.com/privacy.

Information collected from other sources

We collect limited information from third-party sources, specifically from Stripe Connect. When a Tenant connects their Stripe account, we access subscription details, invoice data, customer email addresses, and payment statuses through the Stripe API. This data is used solely to provide our churn recovery and dunning services.

Information collected through the cancel flow widget

Through our embeddable JavaScript widget installed on Tenant websites, we may collect from Subscribers (Tenant end-users):

• Cancellation reasons selected by the Subscriber
• Optional freeform feedback comments
• The Subscriber's response to retention offers (accepted, declined, or dismissed)

Sensitive information

We may process sensitive information when necessary, including financial data related to billing and payment processing. This is handled in accordance with applicable privacy laws.

2. How Do We Use Your Information?

We process your personal information for the following purposes:

• Account management: To create and maintain your account, authenticate your identity, and keep your account in working order.
• Service delivery: To provide our cancel flow management, failed payment recovery (dunning), revenue analytics, and related services.
• Billing: To process subscription payments, generate performance fee invoices, and manage your billing relationship.
• Communications: To send service-related notices, respond to inquiries, and provide customer support.
• Administrative notices: To inform you about changes to our terms, policies, or Services.
• Security: To protect against fraud, unauthorized access, and other security threats.
• Legal compliance: To comply with applicable laws and regulations.

3. What Legal Bases Do We Rely On?

We process your personal information only when we have a valid legal reason to do so:

• Consent: Where you have given us permission to use your information for a specific purpose. You may withdraw consent at any time.
• Contractual performance: Where processing is necessary to fulfill our obligations to you under our Terms of Use or subscription agreement.
• Legal obligations: Where processing is required to comply with applicable laws.
• Vital interests: Where processing is necessary to protect your vital interests or those of a third party.

4. When Do We Share Your Information?

We may share your personal information in the following situations:

• Service providers: We share data with Stripe for payment processing, Supabase for database hosting, Resend for transactional email delivery, and Vercel for application hosting. Each operates under a written contract with us.
• Business transfers: In connection with a merger, acquisition, sale of assets, or similar business transaction.
• Legal requirements: Where required by law, regulation, or legal process.
• With Tenants: Subscriber data collected through the cancel flow widget (cancellation reasons, feedback, offer responses) is shared with the Tenant whose site the widget is installed on, through the ChurnBack dashboard.

We do not sell or share personal information for targeted advertising purposes.

5. Cookies and Tracking Technologies

We may use cookies and similar technologies (such as web beacons) to maintain the security of our Services, save your preferences, and assist with basic site functionality. We use essential cookies required for the operation of the Services. We do not use advertising cookies or third-party tracking for ad targeting.

6. Artificial Intelligence Products

Our Services include AI-powered features for analyzing cancellation feedback and generating retention insights. These features use natural language processing to help Tenants understand churn patterns. All personal information processed by our AI features is handled in accordance with this Privacy Policy.

7. How Long Do We Keep Your Information?

We retain your personal information for as long as your account is active or as needed to provide our Services. When we no longer have a legitimate business need to process your information, we will delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely isolate it until deletion is feasible.

8. Do We Collect Information From Minors?

We do not knowingly collect data from or market to children under 18 years of age. By using our Services, you represent that you are at least 18 years old. If we become aware that we have collected personal information from a minor, we will take steps to delete such information promptly. Contact us at jtvolps@gmail.com if you believe we have collected information from a minor.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to access your personal data
• Right to correct inaccuracies
• Right to request deletion
• Right to data portability
• Right to withdraw consent
• Right to object to processing
• Right to restrict processing

To exercise any of these rights, please contact us at jtvolps@gmail.com. We will respond to your request in accordance with applicable data protection laws.

Account management

You can review or update your account information at any time by logging into your account settings. If you wish to terminate your account, you can do so from your account settings or by contacting us. We may retain certain information to prevent fraud, enforce our terms, or comply with legal obligations.

10. Do-Not-Track Features

We do not currently respond to Do-Not-Track (DNT) browser signals, as no uniform standard for recognizing and implementing DNT signals has been finalized. If a standard is adopted in the future, we will update this policy accordingly.

11. United States Residents — Specific Rights

If you reside in California, Colorado, Connecticut, Virginia, or other US states with privacy legislation, you may have additional rights including:

• Right to know whether we are processing your personal data
• Right to access, correct, or delete your personal data
• Right to obtain a copy of your data
• Right to opt out of the sale of personal data (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

California residents may also request disclosure of the categories of personal information collected and the purposes for which it is used, pursuant to the California Consumer Privacy Act (CCPA).

To exercise these rights, email us at jtvolps@gmail.com.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. If we make material changes, we will notify you by posting a prominent notice on our website or by sending you a direct notification. We encourage you to review this Privacy Policy periodically.

13. How to Contact Us

If you have questions or comments about this Privacy Policy, you may contact us:

• Email: jtvolps@gmail.com
• Mail: ChurnBack AI, LLC, 13150 Portofino Dr, Del Mar, CA 92014, United States