Privacy Policy

Last updated: January 24, 2026

1. Introduction

Rekko ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment recovery service.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email address, company name)
  • Payment information (processed securely through Stripe)
  • Communication preferences

2.2 Information from Stripe

When you connect your Stripe account, we access:

  • Failed payment events and related customer information
  • Customer email addresses and names for notification purposes
  • Subscription and invoice details

2.3 Automatically Collected Information

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Usage analytics

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain our payment recovery service
  • Send dunning emails and SMS to your customers on your behalf
  • Process your subscription payments
  • Send you service-related communications
  • Improve and optimize our service
  • Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party services that help us operate (e.g., AWS for email/SMS delivery, Stripe for payments)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Secure OAuth connections with Stripe
  • Regular security audits
  • Access controls and authentication

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time

To exercise these rights, contact us at [email protected].

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking or advertising cookies without your consent.

9. Third-Party Services

Our service integrates with:

  • Stripe - Payment processing and subscription management
  • AWS SES - Email delivery
  • AWS SNS - SMS delivery

Each service has its own privacy policy governing the use of your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: