Privacy policy

Who this covers

This policy covers people who use LastRetry — our customers' staff — and visitors to this site. If you received a payment email from a business that uses LastRetry, that business is responsible for your data; we process it for them under our data processing agreement, and you should contact them first.

What we collect and why

• Account data — your email, name and company name, to sign you in and run your account (contract).
• Stripe connection — your Stripe account id and the invoices and customer details needed to recover failed payments (contract).
• Billing — the fee records and invoices we issue you (legal obligation and contract).
• Security logs — IP addresses held briefly in memory for rate limiting (legitimate interest).

We set one cookie, the sign-in session. We do not use advertising or analytics cookies.

Who we share it with

• Stripe, Inc. / Stripe Payments Europe Ltd. — Reading invoices on your Stripe account, retrying payments, hosting the card entry page, billing our fees
• Resend, Inc. — Sending recovery emails and sign-in links
• Railway Corporation — Application hosting and database
• Twilio Inc. — Sending text messages to high-value customers, only for accounts that turn SMS on
• Anthropic, PBC — Drafting email copy from the product description you write — no customer data is sent
• Functional Software, Inc. (Sentry) — Error monitoring, when enabled — configured to collect no request data

Some of these are in the United States; transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

Account data for as long as your account exists. When you delete your account we delete your cases and customer data straight away. Invoices we issued you are kept for the period bookkeeping law requires.

Your rights

You can ask to access, correct, export or delete your data, or object to processing, by writing to i.josuekongolo@gmail.com. You can also complain to your data protection authority (in Norway, Datatilsynet).