Privacy Policy
This policy describes how Silent Churn handles data. It is written to match what the service actually does. If you find a discrepancy, treat it as a bug and tell us.
Who we are
Silent Churn is operated by Grégoire Bischoff, entrepreneur individuel, 10 rue des Morins, 37600 Beaulieu-lès-Loches, France, registered under SIREN 902 216 787. For any question about this policy, or to exercise the rights described below, write to gregoire37@gmail.com.
Grégoire Bischoff, entrepreneur individuel is the data controller for the data described here.
What we process, and why
Your Stripe account data
When you connect your Stripe account, we read your invoice, charge and subscription history in read-only mode in order to compute your report. This processing is necessary to perform the service you asked for.
This data is processed in memory and is not retained. We keep only the aggregate results — totals, rates and counts. We do not store individual invoices, charges, subscriptions, or any information about your own customers, including their names and email addresses. Card numbers are never exposed to us by Stripe.
Your Stripe access token
The access token issued by Stripe exists only in server memory for the duration of your request. Once your report is computed we revoke it with Stripe and discard it. It is never written to storage of any kind. See our Security page.
Your report
We store one record per analysis: your Stripe account identifier, your business name, the aggregate figures, the currency and the date range. This lets us show you your report and recognise a returning account.
Your email address
If you choose to give us your email address, we use it to send you your report and occasional updates about the product. Providing it is optional and the report works without it. This processing rests on your consent, and every email contains an unsubscribe link. You may withdraw consent at any time without affecting anything you have already received.
Technical logs
Our servers record standard technical information — timestamps, request paths, error details — for security and debugging. Access tokens are redacted before writing, and request bodies are not logged. These logs are kept for 30 days.
Cookies and tracking
We use a single functional cookie to keep your session during the connection flow. We run no advertising cookies, no analytics scripts, no session recording and no third-party tags on the connection or report pages.
How long we keep things
- Stripe access token: the duration of a single request. Never stored.
- Raw Stripe data: never stored.
- Report and aggregate figures: 30 days, then deleted.
- Email address: until you unsubscribe or ask for deletion.
- Technical logs: 30 days.
Who else sees your data
We do not sell your data, and we do not share it for anyone else's marketing. It is disclosed only to the service providers required to operate Silent Churn — our hosting provider, our database provider and our email provider — each acting on our instructions, and to Stripe, which is the source of the data. We may also disclose data where the law requires it.
Where your data is processed
Data is hosted within the European Union. Where a provider processes data outside the EU, that transfer is covered by European Commission standard contractual clauses.
Your rights
Under the GDPR you may request access to your personal data, correction of it, deletion of it, restriction of its processing, a portable copy of it, and you may object to processing. Write to gregoire37@gmail.com and we will respond within 30 days.
Because we keep so little, most requests are simple: deleting your report and your email address removes everything we hold about you.
If you believe we have mishandled your data, you may lodge a complaint with your national supervisory authority. In France this is the CNIL (cnil.fr).
Children
Silent Churn is a business tool and is not directed at anyone under 16.
Changes
If we change this policy we will update the date at the top of this page. If a change materially affects how we treat data we already hold, we will contact anyone who gave us an email address before it takes effect.