Privacy Policy
Effective date: 1 March 2026
This Privacy Policy describes how Savby collects, uses, and shares information when you use our payment-recovery platform. By using the Service you agree to the practices described here.
Information We Collect
Information you provide
- Account information: name, email address, and password (hashed, never stored in plain text).
- Payment information: billing details are processed by Stripe — we do not store card numbers.
- Stripe Connect authorisation: access tokens enabling us to act on your Stripe account.
- Settings: retry rules, notification preferences, Slack webhook URLs.
Information from Stripe
When you connect your Stripe account we receive and store: customer records, invoice details, charge history, and payment method metadata. We do not store full card numbers.
Usage data
We automatically collect log data such as IP addresses, browser type, pages visited, and actions taken within the Service for security and analytics purposes.
How We Use Your Information
- To provide, operate, and improve the Service.
- To retry failed payments on your behalf via your connected Stripe account.
- To send transactional emails (payment notifications, account alerts).
- To send lifecycle emails relevant to your use of the Service.
- To respond to support requests.
- To detect fraud and ensure security.
How We Share Your Information
We do not sell your personal data. We share information only with:
Data Retention
We retain your data for as long as your account is active. If you close your account we will delete or anonymise your personal data within 90 days, except where we are required by law to retain it longer.
Security
We use industry-standard measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256-GCM). Stripe access tokens are stored encrypted using per-tenant keys. However, no system is completely secure and we cannot guarantee absolute security.
Your Rights
Depending on your jurisdiction you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Data portability.
To exercise these rights email us at privacy@savby.app.
Cookies
The Service uses minimal, strictly-necessary cookies and localStorage for session management. We do not use third-party tracking or advertising cookies.
Children
The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email or via the Service before material changes take effect. The effective date at the top of this page always reflects the latest revision.
Questions about your privacy?
Email us at privacy@savby.app. We typically respond within one business day.
Last updated: March 2026