Privacy policy.

1. Introduction

ChurnGuard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Our role: controller and processor

ChurnGuard handles two different kinds of data, and our legal role differs for each.

• Your account data (your email, company settings, billing status, usage logs). We are the controller. We decide how it is used and this policy governs it.
• Your members' data (member usernames, email addresses, Discord IDs, membership status, payment success and failure events). You are the controller and we are your processor. It is your data. We process it only to provide retention analytics and the outreach you configure, on your documented instructions, and never for our own purposes.

Because you are the controller of member data, you are responsible for having a lawful basis to process it and for the content of messages you send through ChurnGuard. See section 5 for the data-processing terms that apply.

3. Information we collect

3.1 Information from Whop

When you connect your Whop account, we collect:

• Company / community information (name, ID)
• Member data (usernames, email addresses, Discord IDs)
• Membership information (plans, status, join dates)
• Payment events (success/failure status, amounts)

3.2 Information you provide

• Account credentials (email address)
• Company settings and preferences
• Custom message templates

3.3 Automatically collected information

• Log data (IP address, browser type, pages visited)
• Usage analytics (features used, actions taken)
• Device information

3.4 Cookies and similar technologies

We use essential cookies for session management and authentication. We also use first-party analytics cookies to understand how the product is used. We do not use third-party advertising cookies. You can clear cookies in your browser at any time; essential cookies are required to stay signed in.

4. How we use your information

• Provide and maintain our service
• Calculate member health scores and churn risk signals
• Send alerts about at-risk members
• Enable you to send retention messages to members
• Improve and optimize our service
• Communicate with you about your account

4.1 Lawful basis (GDPR)

Where GDPR applies, we rely on the following bases for the account data we control:

• Contract, to provide the service you signed up for: your account, the dashboard, scoring, alerts, and billing.
• Legitimate interests, to keep the service secure and working, to prevent abuse, and to understand which features are used. We balance this against your rights and use the least data that answers the question.
• Legal obligation, to meet tax, accounting, and lawful-request requirements.
• Consent, where we ask for it, such as connecting a Google account. You can withdraw it at any time by disconnecting in Settings.

For member data we act on your instructions as processor, so the lawful basis for that processing is yours to establish as controller.

5. Data sharing and disclosure

We do not sell your personal information. We may share data with:

• Service providers, third parties that help us operate (hosting, email, analytics).
• Legal requirements, when required by law or to protect our rights.
• Business transfers, in connection with a merger, acquisition, or sale of assets.

When you connect ChurnGuard to your Whop, the member data we receive (member emails, Discord IDs, usernames, membership status, and payment success/failure events) is your data, and we act as your data processor. We process it only to provide retention analytics and the outreach you configure, on your documented instructions, and never for our own purposes. These terms form a data-processing agreement consistent with GDPR Article 28; a separate signed DPA is available on request at support@slpwlk.io.

6. Data security

• Encryption of data in transit (TLS) and at rest (AES-256)
• Signed Whop authentication tokens, verified on every request
• Regular security audits and monitoring
• Access controls and authentication requirements

7. Data retention

We retain your data for as long as your account is active. Upon account deletion:

• Member data is deleted within 90 days
• Analytics data is anonymized
• Backup data is purged within 30 days

8. Your rights

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent at any time

California residents (CCPA / CPRA) and residents of the EU, UK, and EEA (GDPR) have additional rights, including the right to know what personal data we hold, to request deletion, to opt out of any sale or sharing of personal data (we do not sell or share), and to lodge a complaint with a supervisory authority. To exercise any of these rights, email support@slpwlk.io from the address on file and we will respond within 30 days.

9. Sub-processors and third-party services

• Whop, member data, authentication, and payment processing. ChurnGuard is a Whop app and is billed through Whop. All card and billing details are collected and processed by Whop under Whop's Privacy Policy; ChurnGuard never receives or stores your card numbers.
• Supabase (United States), our database. Stores member data (usernames, emails, Discord IDs, plans, payment events) and your account settings.
• Vercel (United States), application hosting and the scheduled jobs that sync data and send scheduled mail. Processes data in transit.
• Discord (United States), direct messages to members.
• Resend (United States), delivery of our own emails to you (alerts, digests, trial reminders).
• Google (Gmail API) (United States), when you connect a Gmail account to send member outreach, member email addresses and message contents are sent through Google to deliver those emails.
• Upstash (United States), rate limiting. Processes request metadata, not member profile data.
• Sentry (United States), error monitoring. May incidentally process technical data in error reports.
• PostHog (United States), product analytics. Processes anonymous page views and usage events from our website and app, such as which pages were viewed and when. Automatic capture of clicks and form interactions is switched off, so member profile data is not sent.

Each service has its own privacy policy that governs their use of data.

We will give you notice before adding a new sub-processor that handles member data, so you have a chance to object.

9.1 International transfers

ChurnGuard is operated from the United States and the sub-processors above are US-based, so personal data from the EU, UK, or EEA is transferred to the United States. Where such a transfer needs a safeguard, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where the UK GDPR applies), incorporated into our agreements with those sub-processors. You can request a copy of the relevant terms at support@slpwlk.io.

10. Children's privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you by posting the new policy on this page and updating the "Last updated" date.

12. Contact us

Questions about this policy? Email support@slpwlk.io.