Introduction
Firmhound LLC ("Firmhound", "we", "us") operates Recover, a Stripe failed-payment recovery service available at fourthngoal.ai. This policy describes what data we collect, how we use it, and your rights as a user or visitor.
By using Recover, you agree to the data practices described here. If you do not agree, please do not use the service.
What We Collect
Account data: Your email address, company name, and approximate MRR when you sign up or join the waitlist.
Stripe event data: When you connect your Stripe account via OAuth, we receive webhook events for payment failures and payment successes. This includes customer email addresses, invoice amounts, decline codes, and payment method metadata. We do not store full card numbers or CVV codes.
Usage data: Pages visited, actions taken in the dashboard, session timestamps, and feature interactions. This data is collected to improve the product.
Support communications: Messages sent to support@fourthngoal.ai are stored and used to resolve your issue.
How We Use Your Data
- To operate the Recover service: process webhook events, send dunning emails, render payment update pages, and populate your dashboard.
- To communicate with you: account setup confirmation, product updates, and support responses.
- To improve the product: aggregate usage analytics, recovery rate benchmarks (anonymized), and error reporting.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell your data or your customers' data. We do not use your Stripe payment event data for any purpose other than operating the Recover service for your account.
Data Sharing
We share data with the following sub-processors to operate the service:
- Stripe: Payment processing and Stripe Connect OAuth. Stripe's privacy policy applies to payment data.
- Resend: Transactional email delivery for dunning emails and account notifications. Resend receives your customers' email addresses and the content of dunning emails we send on your behalf.
- Hetzner / hosting infrastructure: Our servers are hosted in Hetzner data centers. Data is stored in the United States.
We do not share data with advertising networks, data brokers, or any third parties beyond those listed above.
Data Retention
Account data is retained for the duration of your subscription plus 90 days after cancellation, after which it is permanently deleted. Stripe event data (payment failure records, recovery events) is retained for 24 months to power historical analytics in your dashboard. You may request earlier deletion by contacting support@fourthngoal.ai.
Your Rights
Depending on your location, you may have the following rights:
To exercise any of these rights, email support@fourthngoal.ai. We will respond within 30 days.
GDPR (EU/EEA Residents)
If you are in the EU or EEA, you have additional rights under the General Data Protection Regulation. Our lawful basis for processing is: (a) contract performance (operating the service you subscribed to), (b) legitimate interests (product improvement and security), and (c) consent where applicable.
You have the right to lodge a complaint with your local data protection authority. For cross-border transfers, we rely on Standard Contractual Clauses where applicable.
CCPA (California Residents)
California residents have the right to know what personal information we collect, the right to delete personal information, and the right to non-discrimination for exercising these rights.
Do Not Sell My Information: We do not sell personal information as defined by the CCPA. We do not share personal information with third parties for cross-context behavioral advertising. No opt-out is required because no sale occurs.
Security
We use TLS encryption for all data in transit. Data at rest is encrypted on our hosting infrastructure. Access to production systems is restricted to authorized personnel only. We conduct security reviews periodically and address findings promptly.
Despite these measures, no internet-connected system is perfectly secure. In the event of a data breach that affects your personal data, we will notify you in accordance with applicable law.
Cookies
We use minimal cookies: session cookies for authenticated users (necessary for the dashboard to function) and no third-party advertising or tracking cookies. We do not use cookie consent banners because we do not set non-essential cookies.
Contact
For privacy questions or to exercise your rights, contact us at support@fourthngoal.ai.
Firmhound LLC
United States