Legal

Privacy Policy

How we handle your data, in plain language.

Effective date: October 1, 2026

Swipe Again ("we", "us", "our") provides failed-payment recovery software for subscription businesses at swipeagain.com. This Privacy Policy explains what information we collect, how we use and share it, and the rights you have. It applies to visitors to our website and to merchants who use our service ("merchants"). If you are a customer of one of our merchants, please read the "Data we process for merchants" section.

1. Information we collect

1.1 Information you give us directly

  • Contact and account information: your name, email address, and store or website URL when you start a trial, subscribe, or contact us.
  • Payment information: subscription payments are processed by Stripe. We receive confirmation of your plan, trial status, and invoices — we never see or store your full card number.
  • Support correspondence: messages you send us, and our replies.

1.2 Information from connected platforms

When you connect Stripe, Shopify, Recharge, or another subscription platform by logging in, we receive an access token scoped to the minimum permissions our recovery engine needs, plus:

  • Payment-failure metadata via webhooks and APIs: failed-charge amounts, currencies, decline codes, timestamps, and the customer email attached to the failed subscription.
  • Recovery activity: records of retries attempted and dunning emails sent on your behalf, so your dashboard can attribute recovered revenue.

We never receive, see, or store full card numbers (PANs). Those remain with your payment processor at all times.

1.3 Information collected automatically (usage and analytics)

  • Website analytics: our site uses Google Tag Manager to load analytics tooling that records pages visited, time on site, referring URLs, browser and device type. Analytics storage is off until you accept cookies in our consent banner (see "Cookies" below).
  • Service telemetry: when you use the Swipe Again dashboard, we log account-level events (logins, connections, recovery activity) to operate and secure the service.

2. Cookies

We use a small set of cookies:

  • Strictly necessary: remembering your cookie-consent choice and basic site functionality.
  • Analytics (opt-in): Google Analytics via Google Tag Manager, used to understand aggregate site usage. These load only after you click "Accept" in our cookie banner.

Our banner implements Google Consent Mode v2: advertising and analytics storage default to denied and are granted only on accept. You can change your choice at any time by clearing your browser's local storage for this site and reloading — the banner will reappear.

3. How we use information

  • Provide the recovery service: detect failed payments, schedule retries, send dunning emails you approve, and update cards where your processor allows.
  • Operate your dashboard, reports, and alerts — including attributing recovered revenue.
  • Bill your subscription and administer the first-30-days guarantee.
  • Provide support, maintain security, prevent fraud, and comply with legal obligations.
  • Understand aggregate website usage to improve our pages (analytics data only, never sold).

We do not use your data or your customers' data for third-party advertising, and we do not train shared models on it.

4. Third-party sharing

We share information only as needed to run the service:

  • Stripe — subscription billing for your Swipe Again plan (plan status, invoices). Stripe is PCI-DSS Level 1 certified; card numbers never touch our systems.
  • Resend — sends dunning emails and transactional messages on your behalf.
  • Supabase — application database hosting your account, recovery history, and settings (encrypted at rest).
  • Vercel — application hosting (encrypted in transit via TLS).
  • Google / Google Tag Manager — website analytics, only with your cookie consent.

Each provider is bound to handle data securely and use it only for our service. We disclose information if required by law or to protect our rights, and we will notify you unless legally prohibited. We never sell personal information — yours or your customers' — to anyone, for any reason.

5. Data we process for merchants (your customers' data)

When you use Swipe Again, you ask us to process your customers' payment-failure metadata and contact details to perform recovery. You remain the data controller for that information; we act as your processor/service provider. If you are a customer of a Swipe Again merchant and want to exercise privacy rights over your data, contact that merchant first — they control it.

6. Retention

We keep operational data for as long as your account is active and as needed to provide the service. Disconnecting a platform revokes and deletes its token promptly. If you cancel, you may request full deletion of your account data — including recovery history — and we will complete it within 30 days, except where law requires longer retention (for example, billing records for tax purposes).

7. Security

Data is encrypted in transit and at rest. Platform tokens are stored encrypted with restricted internal access, and our systems follow least-privilege access. No system is perfectly secure, but protecting recovery data is central to our business and we treat it accordingly.

8. Your privacy rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent (for cookies, via the banner reset described above).

  • GDPR (EEA/UK): you have the rights above plus the right to lodge a complaint with your supervisory authority. Our lawful bases are contract (providing the service), legitimate interests (security, improvement), and consent (analytics cookies).
  • CCPA/CPRA (California): you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any "sale" or "sharing" — we do not sell or share personal information as those terms are defined.

How to make a privacy request

Email support@swipeagain.com with the subject "Privacy request" and tell us what you'd like (access, correction, deletion, export). We verify account ownership and respond within 30 days (45 days where the law allows for complex requests). We will never discriminate against you for exercising these rights.

9. Children

Swipe Again is a business service and is not directed at children under 16. We do not knowingly collect their information.

10. International transfers

Our infrastructure may process data in the United States. Where required, we rely on appropriate safeguards for cross-border transfers.

11. Changes to this policy

We will post changes here and update the effective date above. Material changes will also be announced by email to account holders at least 14 days before taking effect.

12. Contact

Swipe Again
2062 Zanes Creek Drive, Inman, SC 29349
Email: support@swipeagain.com
For privacy requests, use the process in section 8.