Built to be trusted with your revenue data.
Churnless connects to your billing system and your customers’ history. We treat that access with the seriousness it deserves — here’s exactly how.
Encrypted connections and secrets
Churnless uses HTTPS for connections. Stripe credentials are encrypted at rest with AES-256-GCM using an application-managed key and decrypted by the server only when needed.
Least-privilege Stripe access
Connect with a restricted Stripe key. Churnless only requests the read scopes needed to detect risk and the limited write scopes needed for save actions you enable.
Operational safeguards
Production access is limited to the Churnless team, and application errors are logged for investigation. We are a small team: ask us about our current operating practices during a security review.
Scoped access
Verified email sign-in with password reset, and team invites by email. Owner, admin, and member roles, with API keys, integrations, billing, Slack and webhooks restricted to owners and admins. Every query is scoped to your organization, and owners and admins can review an audit log of sensitive changes (keys, integrations, billing, team and flow changes).
Resilient infrastructure
Hosted on managed cloud providers (Vercel, Neon Postgres, Tinybird) that provide encryption at rest and managed backups.
Your data, your call
Export or erase a customer's personal data with the data-subject API (POST /api/v1/gdpr/export and /api/v1/gdpr/delete), available on every plan. Contact us about workspace-level exports, deletion, and processing terms.
Security questions, answered.
Where is my data stored?
Churnless uses managed Postgres (Neon) for customer and billing records and Tinybird for analytics (AWS us-west-2, United States). Data residency options are not currently offered; contact us to confirm current hosting regions. The full list of third parties is on our subprocessors page.
What Stripe permissions do you need?
A restricted key with read access to customers, subscriptions, and invoices, plus the specific write scopes required for payment recovery you enable. You can revoke it from Stripe at any time.
Who on my team can see customer data?
Organization members access customer data through authenticated, organization-scoped routes. Administrative settings restrict changes to owners and admins where required. Contact us for a review of support access.
Do you use my data to train AI models?
Churnless uses customer context to generate analysis and retention messages. Contact us for the current AI providers, processing terms, and data-retention details before sending sensitive information.
Can I get a DPA or security review?
Contact us for a DPA and a security review. We'll walk your security and procurement teams through our current controls, including what we don't have yet.
Secure by design. Saving revenue by default.
Start with a free, read-only audit. The 14-day trial starts only when you turn protection on. Bring your security team — we’ll walk them through it.