Privacy policy

• Account details: name, email address, password (stored by our authentication provider, never by us in readable form) and plan.
• Billing for your plan: your Stripe customer ID and subscription status. Card details stay with Stripe.
• Project settings: product name, logo, colours, page wording, support email, return links and offers.
• Stripe connection: your connected account ID, display name and granted permissions. No secret keys or access tokens.
• API keys: a short visible prefix plus a one-way hash. The full key is shown to you once and never stored.

On the secure offer page (a link created by the vendor’s own system):

• Stripe customer and subscription IDs, the plan, price, billing interval, amount and currency, read from the vendor’s Stripe account to work out which offers apply.
• The reasons chosen and any comment the customer writes.
• Which offer was shown, whether it was accepted, the exact terms confirmed, and whether Stripe applied the change.
• An optional customer reference the vendor passes in (for example their own user ID).

On the feedback-only page (a public link):

• The email address the customer enters, their reasons and comment, and the option they picked.
• The IP address and browser type the request came from, kept with the session to help vendors spot abuse.

• Stripe webhook events about connected accounts, checked for authenticity and stripped of known personal fields before storage.
• Server logs with request IDs, timestamps and internal IDs, used to keep the service running and investigate problems.
• Cookies that are strictly necessary: our authentication provider’s session cookies when a vendor is signed in, and a short-lived, HttpOnly cookie that ties a cancelling customer to their session. We use no advertising or analytics cookies.

• To run offer pages, decide which offer a customer qualifies for, and make the change in Stripe once they confirm it.
• To confirm and reconcile those changes against Stripe, and show vendors accurate results.
• To send the emails a vendor has switched on (for example a note when a customer asks for help), and service emails about the vendor’s own account.
• To keep the service secure, prevent fraud and abuse, and meet legal obligations.

We do not sell personal data, use it for advertising, or use it to train models.

• Vendor account data: while the account is open, then deleted within 30 days of closure, except what we must keep for tax, accounting or legal reasons.
• Reoffers and comments: for as long as the vendor’s account is open, unless the vendor asks us to delete them sooner.
• Records of accepted offers and confirmations: kept unchanged for as long as they may be needed to answer a billing dispute. Later edits to an offer never alter them.
• Server logs: up to 30 days.

Only the providers that run the service. They are listed with what each one handles on the subprocessors page. Data is stored in [to complete: data storage region]. We will disclose data if the law requires it, and tell the affected vendor unless we are prohibited from doing so.

Offer links and API keys are stored only as one-way hashes. Secrets live on the server and never reach the browser. Database rules keep each vendor to their own data. Every Stripe webhook is signature-checked, and billing actions are written to an audit trail that cannot be edited. No system is perfectly secure, so if we confirm a breach affecting personal data we will tell affected vendors within 72 hours of confirming it.

Depending on where you live, you may have the right to see, correct, export or delete your personal data, and to object to or restrict how it is used. Vendors can exercise these rights by emailing hello@reoffer.com. If you are a customer of a business that uses Reoffer, please contact that business first; they control your data and we will help them respond. You may also complain to your local data protection authority.

If we change this policy we will update the date above, and email vendors about material changes. Contact: hello@reoffer.com. Postal address: [to complete: registered address].