Privacy Policy

Last updated: 15 November 2026. Working draft.

Who we are

Recoverly is operated by the owner of andloop.io. Questions about this policy go to the address in the operator contact on your account emails.

Merchants

When you sign up we store your email address, the plan you pick, your branding (business name, button color, reply-to address), and the connection to your billing platform. Stripe connections store the connected account id. Recharge and WooCommerce credentials are encrypted at rest. We do not store full card numbers.

Your customers

When a renewal fails, the billing platform sends us the invoice or order id, the amount, the currency, a decline reason when one exists, and the customer's name, email, and phone if the platform includes them. We use that to retry the payment and to send the reminder you configured. We keep the record of the recovery so we can invoice the fee.

Processors

Payments for your subscription to us run through Stripe. Email is sent through Amazon SES or Resend. SMS, if you turn it on, is sent through Twilio. The application is hosted on Amazon Web Services.

SMS consent

Recoverly sends a text only when a merchant has turned SMS on and has confirmed that their customer agreed to receive account-related messages from that merchant's business. The message says that a subscription payment did not go through and includes one link to update the card. Message frequency depends on the merchant's failed payments, and is at most a few messages per failed renewal. Message and data rates may apply. Reply STOP to opt out of further texts and HELP for help. Consent to receive texts is not a condition of buying the subscription. Turning SMS on in Recoverly is the merchant's statement that this consent already exists.

Retention

We keep merchant accounts and recovery records for as long as the account is open and as needed to invoice fees and resolve disputes. Database backups are kept for 14 days.