Privacy Policy
Last updated: January 24, 2026
1. Introduction
Rekko ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment recovery service.
2. Information We Collect
2.1 Information You Provide
- Account information (name, email address, company name)
- Payment information (processed securely through Stripe)
- Communication preferences
2.2 Information from Stripe
When you connect your Stripe account, we access:
- Failed payment events and related customer information
- Customer email addresses and names for notification purposes
- Subscription and invoice details
2.3 Automatically Collected Information
- Log data (IP address, browser type, pages visited)
- Device information
- Usage analytics
3. How We Use Your Information
We use the collected information to:
- Provide and maintain our payment recovery service
- Send dunning emails and SMS to your customers on your behalf
- Process your subscription payments
- Send you service-related communications
- Improve and optimize our service
- Comply with legal obligations
4. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third-party services that help us operate (e.g., AWS for email/SMS delivery, Stripe for payments)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
5. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit and at rest
- Secure OAuth connections with Stripe
- Regular security audits
- Access controls and authentication
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.
7. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at [email protected].
8. Cookies
We use essential cookies to maintain your session and preferences. We do not use tracking or advertising cookies without your consent.
9. Third-Party Services
Our service integrates with:
- Stripe - Payment processing and subscription management
- AWS SES - Email delivery
- AWS SNS - SMS delivery
Each service has its own privacy policy governing the use of your data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at:
- Email: [email protected]
- Address: [Your Company Address]