Privacy Policy

RetainUR (“we”, “us”) operates retainur.com, a service that prevents credit card issuers from closing your inactive cards by placing small recurring charges on them. We are the data controller for the personal information described in this policy. Questions go to support@retainur.com.

We collect only what the service needs to function:

• Account information. Your email address and name, collected when you sign in through our authentication provider, WorkOS.
• Payment information. Your card details are collected and stored by Stripe, our payment processor. Full card numbers never touch our servers and we never store them. We keep only a reference to your Stripe customer record, the card’s last four digits and brand for display, and your charge schedule.
• Preferences. Your charge intervals and email notification settings.
• Support messages. Anything you send us through the contact form or by email.
• Usage data. We use PostHog to understand how the site is used: pages visited, buttons clicked, errors encountered, and anonymized session recordings in which everything you type is masked before it leaves your browser. Card details are entered in a Stripe-hosted frame that recordings cannot see. Our analytics run cookielessly — they store nothing on your device.

We do not run advertising trackers on our site. See the Cookie Policy for the short list of cookies we use.

• To run the service — placing your scheduled charges, showing your cards in the dashboard, and keeping you signed in.
• Transactional email — receipts, charge confirmations, and notices about failed charges or account changes. These are part of the service and can’t be fully disabled while you have active cards.
• Marketing email — occasional reminders and product updates. You can opt out anytime from your notification preferences in the app or the unsubscribe link in any marketing email.
• Support — responding when you contact us.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

All payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. When you add a card, the card data goes directly from your browser to Stripe. Stripe’s handling of your data is governed by the Stripe Privacy Policy.

We share data only with the service providers that run RetainUR, and only as needed:

• Stripe — payment processing and card storage.
• WorkOS — sign-in and account authentication.
• Amazon Web Services — hosting and email delivery.
• PostHog — product analytics and error monitoring, as described above. PostHog processes this data on our behalf under the PostHog Privacy Policy.

We may also disclose information if required by law, or to protect the rights, safety, or property of RetainUR or our users.

We keep your account data for as long as your account is active. When your account is deleted (email support@retainur.com to request deletion), we delete or anonymize your personal information, except where we must retain records to comply with legal, tax, or accounting obligations (for example, payment records retained by Stripe).

Depending on where you live (including under the GDPR and the CCPA), you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Opt out of marketing at any time.

To exercise any of these rights, email support@retainur.com. We will respond within 30 days. We never discriminate against you for exercising your privacy rights.

All traffic to RetainUR is encrypted with TLS. Sessions are protected with signed, HTTP-only cookies. Card data is handled exclusively by Stripe. No system is perfectly secure, but we design for the minimum data footprint — the less we hold, the less there is to lose.

RetainUR is a financial service for credit card holders and is not intended for anyone under 18. We do not knowingly collect data from minors; if you believe a minor has created an account, contact us and we will delete it.

If we make material changes to this policy, we will update the date at the top of this page and notify you by email before the changes take effect. Continued use of the service after changes take effect constitutes acceptance.

Privacy questions or requests: support@retainur.com, or use the contact form.