Privacy Policy

1. Who we are

Cancelbox, Inc. (“Cancelbox,” “we,” “us”) provides a retention-routing layer for Stripe subscription businesses. This policy covers the Cancelbox website, dashboard, APIs, and hosted cancellation pages we operate.

If you are using a cancellation page branded by one of our customers, that customer is typically the controller of your subscriber data. Cancelbox processes that data on their instructions. See the Data Processing Addendum.

2. Controller and processor

• Cancelbox is the controller of account data for people who sign up for Cancelbox (name, work email, authentication, billing for Cancelbox plans).
• Cancelbox is the processor of end-customer and subscription data that a workspace connects through Stripe or creates in a cancellation session.
• Demo mode keeps fictional Northstar Analytics data on the application host. It does not send email, call Stripe, or write live customer records.

3. What we collect

Workspace members. Name, work email, password hash or SSO identifiers, role, support preferences, and Cancelbox subscription status.

Connected Stripe data. Account IDs, products, prices, customer names and emails already in Stripe, subscription status, plan, MRR, period dates, and billing events needed to preview or confirm a route. Card numbers, CVC, and full PAN never enter Cancelbox systems. Connect access tokens are encrypted at rest and never sent to the browser.

Cancellation sessions. A hashed session token, chosen reason, route shown, action taken, optional feedback, timestamps, and whether Stripe confirmed the change.

Technical data. IP address, user agent, and security logs. Optional product analytics only if you accept analytics cookies. See the Cookie Policy.

4. How we use data

• Authenticate you and isolate workspaces with row-level security.
• Match a cancellation reason and customer context to a Churn Route.
• Preview exact billing consequences before a subscriber accepts a change.
• Apply discounts, downgrades, or period-end cancellation on the connected Stripe account only after acceptance.
• Count a save only after Stripe confirms the billing action.
• Show net retained MRR (MRR saved minus discount cost) and related reports.
• Send transactional email and optional alerts you configure.
• Secure the service, debug failures, and meet legal obligations.

We do not sell personal information. We do not use subscriber data to train public AI models.

5. When we share data

We share data with subprocessors listed at /subprocessors, with Stripe on the connected account you authorize, with your workspace members according to their role, and when the law requires it. We do not share data for advertising networks.

6. Retention

• Account and workspace records: while the workspace is active, then up to 30 days after deletion unless a longer legal hold applies.
• Cancellation sessions and billing-action events: retained for the workspace so save accounting stays auditable, typically 24 months unless you ask us to delete sooner and Stripe records remain the source of truth.
• Audit logs: append-only while the workspace exists.
• Security logs: typically 90 days.
• Cancelbox billing records: as required by tax law.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict personal data, to object to certain processing, and to appeal a denial. California residents may request to know, delete, or correct personal information and to opt out of “sale” or “sharing” as those terms are defined by the CCPA. Cancelbox does not sell or share personal information for cross-context behavioral advertising.

Submit a request at /privacy/request or email privacy@cancelbox.co. We will verify the request and respond within the time the applicable law requires. End customers of a Cancelbox workspace should contact that company first; we will assist the workspace as processor.

8. International transfers

Cancelbox is operated from the United States. If we transfer personal data from the EEA, UK, or Switzerland, we use an approved mechanism such as the EU Standard Contractual Clauses and the UK Addendum, plus the safeguards in the DPA.

9. Children

Cancelbox is a B2B product. It is not directed to children under 16. We do not knowingly collect personal data from children.

10. Contact

Privacy: privacy@cancelbox.co. Security: security@cancelbox.co. Legal: legal@cancelbox.co. Cancelbox, Inc., Attn: Legal, notices via legal@cancelbox.co.