Privacy policy
RetainFast is built to hold as little data as possible. This page says exactly what it stores, what it refuses to store, and who else touches it.
The short version
RetainFast is a widget that runs on your website and asks your cancelling customers one question. We store the answer — never who gave it.
- We never receive or store your Stripe keys. There is no OAuth connection to your billing provider, by design.
- We never store names, emails, IP addresses, or any other identifier belonging to your end users.
- We never sell data, and we do not run advertising or third-party analytics on the widget.
Data about you, the customer
When you buy a licence and sign in, we hold:
- Your Whop user id, so your account can be recognised on return.
- Your email address and display name, as supplied by Whop when you sign in.
- Your site configuration: the cancel-flow wording, offers, colours, allowed domains, and your widget public key.
We do not see or store your payment card. Whop is the merchant of record and handles the transaction end to end; we only ask Whop whether a valid licence exists.
Data collected by the widget
When somebody opens your cancel flow, the widget sends us a small event so your dashboard can show a funnel. Each event contains:
- The event type — opened, reason selected, offer shown, saved, cancelled, or dismissed.
- The reason id and offer id that were chosen, which are labels you defined yourself.
- A random session id, generated in the browser, that exists only to stop one session flooding the counters. It is not linked to a person and is not stored.
- Optional freeform text, if the person chose to type a reason.
These events are never stored one-by-one. They are added to a single monthly counter document per site, so what we retain is an aggregate, not a log of individuals. The only free text we keep is what someone deliberately typed into the box, capped at 500 entries per site.
What the widget deliberately does not collect
- No cookies are set by the widget on your visitors.
- No IP addresses, user agents, or device fingerprints are stored.
- No cross-site tracking, no advertising identifiers, no third-party pixels.
If one of your customers types something identifying into the freeform box, that text is stored as written. Tell them not to, or ask us to delete it.
Why we are allowed to hold it
For your account data, the basis is performance of a contract: we cannot give you a dashboard without knowing which account is yours. For the aggregate widget counters, the basis is legitimate interest — producing the analytics you bought the product for — with the scope deliberately kept to data that does not identify anyone.
Who else processes it
- Whop — authentication and payments, as merchant of record. Holds your billing details; we never see them.
- Google Firebase (Firestore) — stores site configuration and the monthly counters. Hosted in the United States.
- Vercel — hosts the application and serves the widget file.
- Google Fonts — serves the typefaces used on this website. Not loaded by the widget on your site.
How long it is kept
Monthly counter documents are kept while your account is open, so year-on-year comparison works. Freeform notes are capped at the most recent 500 per site; older ones fall off automatically. Ask us to close your account and we delete the configuration, the counters, and the notes.
Your rights
You can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Because we store no identifiers for your end users, we generally cannot locate data about a specific individual — there is nothing to look them up by. That is the intended outcome, not a limitation we are apologising for.
Security
The database is reachable only by the server, through a service account. Client access rules deny everything, so no browser can read or write it directly. The widget public key is public by design; what actually protects your data is the allowed-domains list, which rejects requests from any origin you have not approved.
Changes and contact
If this policy changes in a way that affects what we collect, the date at the top changes and account holders are told. For any privacy question, or to ask for deletion, contact the address listed on your Whop receipt.
A note on this document. It was drafted to describe honestly how RetainFast actually works, but it has not been reviewed by a lawyer. Before taking money from customers, have a solicitor check it against the rules that apply where you and your customers are based.