Privacy Policy

Korrali Revenue Recovery ("Korrali", "we", "our") is operated by Korrali LLC This policy explains what data we collect when you use revenue.korrali.com and the Korrali Revenue Stripe App.

• Account data: Name and email address when you sign up via Google OAuth or email magic link.
• Stripe data (read and write): When you connect your Stripe account, we read charge, customer, subscription, and invoice records to detect revenue anomalies, and — when you approve recovery — we retry, pay, and update failed invoices, and move a subscription off a retired price or remove an expired discount, on your behalf to recover revenue. We never store raw card numbers, bank details, or PII beyond what Stripe already exposes in its API response.
• Anomaly records: Detected anomalies (type, financial impact, status, timestamps) are stored so you can track and resolve them.
• Usage data: Standard web server logs (IP address, browser, pages visited) retained for 30 days for security and debugging.
• Billing records: When you subscribe we record who accepted our Terms of Service, which version, when, and from which IP address and browser. We also keep a record of sign-ins, the days each user used the product, and key actions (such as connecting Stripe or running a recovery), with the IP address each came from. These are the records we give a bank if a payment is disputed.

• Run anomaly detectors against your Stripe account and surface findings in your dashboard.
• When you enable recovery, retry and pay failed invoices and update invoice records to recover revenue on your behalf.
• Send email notifications about new anomalies (you can turn these off in Settings).
• Process subscription payments via Stripe (we never see your card number).
• Improve detection accuracy and fix bugs.

We do not sell your data, share it with advertisers, or use it to train our own AI models.

When AI-personalised dunning is enabled, we send the details needed to write a recovery email — such as the customer name, invoice amount, currency and failure reason — to a third-party AI provider to generate that email's copy. We use Groq as the primary provider and OpenAI as a fallback. This data leaves our infrastructure to reach them.

If the generated copy fails our safety and validity checks, we fall back to a fixed deterministic template and no AI output is sent to anyone. We never send raw card numbers or bank details, because Stripe never exposes them to us in the first place.

We do not use your data to train AI models. How long each AI provider retains the requests we send, and whether it may use them, is governed by that provider's API terms; we use only their API offerings, not consumer products.

Google (Gemini) is never sent your Stripe or customer data. It powers only the free tools and demo chat on this site, which run on what you type into them.

• Stripe — the billing data we analyse (via your connection), and our own subscription billing.
• Groq — AI copy for personalised dunning emails; free tools and demo chat.
• OpenAI — fallback AI copy for personalised dunning emails; free tools fallback.
• Google (Gemini) — free tools and demo chat only. Never your Stripe or customer data.
• Amazon Web Services — application hosting and database (us-east-1).
• Resend — sign-in, notification and dunning email delivery.
• Google — OAuth sign-in.
• PostHog — product analytics.
• Sentry — error and performance monitoring.

When you connect Stripe, Korrali Revenue requests read and write access to your Stripe account, used in two ways:

• Read — charges, customers, subscriptions, and invoices, to detect payment-failure spikes, duplicate charges, silent churn, and past-due invoices.
• Write — to run the recovery you enable: retrying and paying failed invoices and updating invoice records as part of dunning.

Beyond the invoice-recovery actions you enable, we do not move your payouts, issue refunds, or change your bank or account settings. You can revoke access at any time from Settings, or from your Stripe dashboard.

Anomaly records are retained for 2 years so you can track resolution trends. Account data is deleted within 30 days of account closure on request ([email protected]). Billing records (terms acceptance, the usage record above, and any payment disputes) are kept for as long as we need them for accounting, tax and payment-dispute purposes, including after a workspace is closed.

All data is transmitted over TLS. Your Stripe access token is encrypted at rest in our database, and is never exposed to the frontend or logged. Korrali Revenue is not SOC 2 audited; ask us if you need our security answers for a vendor review.

You can access, export, correct, or delete your personal data by emailing [email protected]. EU/UK users may also lodge a complaint with their local data protection authority.

We will notify you by email and update the effective date above if we make material changes. Continued use of the service after changes constitutes acceptance.

Questions? Email [email protected] or write to: Korrali LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA.