1. Who we are
Recouper ("we", "us", "our") is the operator of recouper.co.uk. For the personal data described in Section 2, we act as the data controller. For personal data belonging to your customers (Section 3), we act as a data processor on your behalf, as your business is the controller of that data.
2. Data we collect about you (our customer, the business)
- Account details: name, email, business name, phone number (if provided)
- Billing information, handled via Stripe (we don't store full card details ourselves)
- Usage data: how you use the Recouper dashboard
3. Data we process on your behalf (your customers' data)
When you connect a Stripe or GoCardless account, we process personal data about your customers strictly to provide the service, including: name, email address, phone number, and details of the failed payment (amount, date, status). This data is used only to run the chase sequence you've configured and is not used for any other purpose.
4. Legal basis for processing
- For your own account data: performance of our contract with you, and our legitimate interest in operating and improving Recouper.
- For your customers' data: processed on your instructions, under the legal basis you've established with your own customers (typically your existing terms with them, or your legitimate interest in payment collection).
5. Who we share data with (subprocessors)
To provide the service, we share relevant data with:
- Stripe and GoCardless — to detect and process payment status
- Resend — to send chase emails
- Twilio — to send chase SMS messages
- Supabase — our database and hosting infrastructure
Some of these providers may process data outside the UK/EEA; where they do, we rely on their standard contractual safeguards.
6. Data retention
We retain failed payment records and related communications for as long as your account is active, plus a reasonable period afterward for legal and accounting purposes, after which they're deleted.
7. Your rights
Under UK GDPR, you (and, where applicable, your customers) have rights to access, correct, delete, or export personal data we hold. Contact us at info@recouper.co.uk to exercise these rights.
8. Security
We take reasonable technical and organisational measures to protect personal data, including encrypted connections and access controls. No system is completely secure, and we can't guarantee absolute security.
9. Cookies
Recouper currently uses only strictly necessary session cookies required for you to stay logged in. We do not currently use analytics or advertising cookies. If this changes, we will update this policy.
10. Changes to this policy
We may update this policy from time to time. We'll post the updated version here with a new "last updated" date.
11. Contact
Questions about this policy, or to exercise your data rights: info@recouper.co.uk