Privacy Policy

Exeechain is churn and failed-payment recovery for SaaS on Stripe, operated by Lachu Man Basnet. This policy explains what data we collect, how we use it, and the rights you have over it. We've tried to write it the way we'd want to read it: short and direct.

Who is responsible for what. For your own account data - your name, your email, your billing details - we are the controller: we decided to collect it and we decide what happens to it. For the customer records you bring into Exeechain, we are a processoracting on your instructions; you remain the controller of your customers' data, and a Data Processing Addendum covering that relationship is available on request from legal@exeechain.com.

Where we are. Exeechain is not yet incorporated as a company, so there is no registered entity or company number to give you. It is operated by one person, and requests reach that person directly at legal@exeechain.com. If you need a counterparty entity on a contract before you can buy, say so and we will sort that out rather than let you find out later.

Data we collect

From you (account data)

• Your name, email address, and workspace name (collected on signup).
• Billing information (handled and stored exclusively by Stripe - we never see card numbers).
• Anything you type into the product (notes, playbook configs, settings, etc.).

From your customers (the people you track)

• Identifiers and email addresses you upload, sync from Stripe, or send via the tracking API.
• Behavior events (logins, feature usage, payments) you push to /api/v1/track.
• Conversation content (emails, chat) you optionally connect from Intercom, Zendesk, etc.

Automatically

• Standard server logs (IP, user-agent, timestamp) for security and debugging, retained 30 days.
• Aggregate, non-identifying product metrics (page views, feature usage) for product improvement.

How we use your data

• To provide the product: scoring churn risk, generating playbooks, sending alerts.
• To bill you accurately and prevent fraud.
• To send transactional emails (digest, alerts, billing receipts). You can opt out of digests.
• To respond to support requests.

We do not sell your data, and Exeechain does not train any models on it. Where we send prompts to LLM providers to power scoring, the copilot, and generated plans, see Sub-processors below for who those providers are and how each handles data. All AI inference runs in the United States. We do not route your data outside the United States or the EU, and no provider we use trains on your data. Your data is yours.

Sub-processors

Every vendor that touches customer data on our behalf, what it does, and where it processes.

• Anthropic (Claude) - Writes the narrative for a risk score, the drafted save emails, QBRs and Copilot answers. The numeric score is not produced by a model - it is a deterministic scorecard. Processes in: United States.
• NVIDIA NIM - Automatic fallback for the above when Anthropic is unavailable, so the product degrades rather than stops. Processes in: United States.
• Stripe - Read-only access to your billing data on paid plans: invoices, subscriptions, payment failures, renewal dates. Processes in: United States.
• Polar - Our own billing. Processes your payment details for an Exeechain subscription. Processes in: United States.
• Resend - Delivers email we send on your behalf, and our own transactional email. Processes in: United States.
• Sentry - Error monitoring. Receives stack traces and request context; not customer records. Processes in: United States.
• Upstash - Rate limiting and short-lived locks. Holds keys and counters, not customer data. Processes in: United States.
• Cloudflare - Sits in front of every public endpoint for DDoS protection and TLS termination. Processes in: Global edge network.
• Google - Sign in with Google, when you choose it. Receives the authentication request only. Processes in: United States.

Hosting

Exeechain runs as containers we operate, with its PostgreSQL database on a private network alongside the application rather than on a managed third-party database service. Backups are encrypted.

We are in the middle of moving hosts and would rather name the new one here than the old one. If you need the current provider and region in writing before you sign anything, email legal@exeechain.com and you will get a straight answer the same day.

Only if you connect them

These receive data only because you chose to link the account. Disconnect it and the flow stops.

• HubSpot - CRM context for scoring. Processes in: United States.
• Salesforce - CRM context and two-way sync. Processes in: United States.
• Intercom - Support conversations, as a churn signal. Processes in: United States.
• Zendesk - Support tickets, as a churn signal. Processes in: United States.
• Mixpanel - Product usage events. Processes in: United States.
• Slack - Where risk alerts are delivered, if you connect it. Processes in: United States.

Data retention

• While your account is active, we retain your data so the product works.
• If you cancel, we keep your data for 30 days in case you reactivate, then delete it.
• You can request immediate deletion at any time from Settings → Privacy or by emailing legal@exeechain.com.

Your rights (GDPR / CCPA)

You can request access, correction, export, or deletion of your personal data at any time. We respond within 30 days. EU and California residents have additional rights under GDPR and CCPA. Email legal@exeechain.comwith the subject “Data Request”.

Security

See our Security page for technical details. Short version: TLS in transit, AES-256 at rest, principle-of-least-privilege access controls, audit logging on every admin action.

Cookies

We use first-party cookies for authentication (set by us, not a third party) and a single first-party analytics cookie to count anonymous page views. We do not use third-party advertising cookies, cross-site trackers, or fingerprinting. You can clear cookies at any time from your browser settings - you'll be signed out and need to sign in again, but no other functionality breaks.

Changes to this policy

We'll notify you by email and in-app at least 30 days before any material change takes effect.

Contact

Email legal@exeechain.com for any privacy-related question. We aim to respond within two business days.