Privacy Policy

This Privacy Policy explains what information Found Revenue ("we," "us") collects when you use our service, how we use it, and how long we keep it.

Information We Collect

If you create a merchant account, we collect the email address and password you provide, or your identity from Google or GitHub if you sign in that way, plus the store and Stripe Connect information needed to detect and pay out recovered checkouts.

If you are a merchant's customer with an abandoned or failed checkout, we receive limited order information from the merchant or their platform — your email address, the order amount, and (where available) cart contents — solely to attempt payment recovery on the merchant's behalf. We are a data processor for this information, not its owner; the merchant controls it, and questions about it should go to them first.

Cookies

We use a single strictly-necessary session cookie to keep merchants signed in. It is httpOnly (not readable by page scripts) and is not used for advertising, analytics, or cross-site tracking.

How We Use Information

We use merchant account information to operate the service: keeping you signed in, preventing abuse, and processing payouts and our success fee through Stripe Connect. We use recovered checkout data (customer email, order details) solely to generate and send a recovery message and process the resulting payment — never for advertising, resale, or any purpose beyond payment recovery.

Third-Party Service Providers

We rely on a small number of infrastructure providers to run the service:

• Supabase — hosts account and recovery data.
• Google / GitHub — only if a merchant chooses to sign in with one of them.
• Stripe — processes recovered payments and payouts. We do not receive or store full payment card details ourselves.
• OpenAI — drafts the text of recovery messages based on order details.
• Resend— delivers recovery emails to customers on the merchant's behalf.

Security

We use industry-standard practices to protect your data, including encrypted connections, row-level database access controls, and secure session cookies. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Your Choices

You can contact us to request access to, correction of, or deletion of your account data.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

Contact

Questions about this policy? Contact us.