This Privacy Policy for Dawaris Technologies LLC, doing business as Retryd ("Company," "we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://retryd.com, create an account, or otherwise use Retryd's payment recovery services.
Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at info@dawaristech.com.
SUMMARY OF KEY POINTS
What personal information do we process? When you register for an account, we process your name, email address, and password. When you use the Services to recover failed payments on your own connected Stripe account, we process personal information about your customers, including their names, email addresses, phone numbers, and limited payment information (such as the last four digits of a card and the reason a payment failed), which we receive from Stripe on your behalf and with your authorization.
Do we process any sensitive personal information? Yes. We process limited financial information (such as decline reasons, transaction amounts, and card last-four digits, never full card numbers) and account login/authentication data, as described below.
Do we collect any information from other sources? Yes. We receive information about your customers from Stripe, on your behalf and with your authorization, in order to operate the Services.
How do we process your information? We process your information to provide the Services you have contracted us for, including detecting failed payments, sending automated retry attempts, generating and sending email and SMS communications on your behalf, operating your embeddable widget, processing your subscription payment, and responding to your inquiries.
In what situations and with which parties do we share personal information? We share information with the third-party service providers described below (including Stripe, Resend, Twilio, and Inngest) solely as necessary to operate the Services, and, where legally required, with Dawaris Technologies LLC as our parent company.
What are your rights? Depending on where you are located, you may have rights to access, correct, or delete your personal information.
How do you exercise your rights? The easiest way is by contacting us at info@dawaristech.com.
In Short: We collect the personal information you provide when you register for an account.
When you register for the Services, we collect: your name, your email address, and your password (stored as a secure, one-way cryptographic hash, never in plain text). If you upload a business logo or configure email/SMS message templates as part of your account ("Account Content"), we store that content as necessary to operate the Services, as described in our Terms of Service.
In Short: When you connect your Stripe account, we receive information about your own customers from Stripe, on your behalf and with your authorization.
The Services work by connecting to your own Stripe account through Stripe's official OAuth authorization process. Once connected, Stripe sends us information about your customers' failed and successful payments, including: your customer's name, email address, and phone number (where available); the last four digits of the payment card used (we never receive or store full card numbers); the reason a payment failed (such as insufficient funds or an expired card); the transaction amount and currency; and, where applicable, the name of the subscription or product associated with the payment.
This information belongs to your customers, not to you or to us. We process it solely on your behalf and in accordance with your instructions, as your service provider, in order to detect failed payments and send the retry attempts and communications you have configured.
Sensitive information. We process limited categories of sensitive information, specifically: financial information (decline reasons, transaction amounts, and card last-four digits) and account login/authentication credentials. We do not process health data, biometric data, genetic data, racial or ethnic origin, religious or philosophical beliefs, sexual orientation, or any other category of sensitive information beyond what is described in this Policy.
In Short: We automatically collect certain technical information, such as your IP address and browser information, when you use the Services.
We automatically collect certain information when you visit or use the Services. This includes your IP address, browser type, and general log and usage data related to your activity on the Services. This information is used to maintain the security and proper operation of the Services. We also automatically receive payment event data from Stripe webhooks (decline codes, timestamps, and transaction amounts) as described above.
We use one essential cookie to maintain your logged-in session. We do not use cookies or similar technologies for advertising, analytics, or tracking purposes.
In Short: We process your information to provide the Services, to process your subscription payment, to send the communications you configure, and to protect the security of the Services.
We process your personal information for the following purposes:
In Short: We only process your personal information when we have a valid legal reason to do so.
If you are located in the EEA, UK, or Switzerland, we rely on the following legal bases: Performance of a Contract, to provide the Services you have subscribed to; Legitimate Interests, to protect the security and proper operation of our Services; Consent, where you have given it, such as at account registration; and Legal Obligations, where processing is required to comply with applicable law.
In Short: We disclose personal information to the specific third-party service providers listed below, solely as necessary to operate the Services. We do not sell personal information.
We disclose personal information to the following categories of third-party service providers, each identified by name:
We may also disclose personal information: to Dawaris Technologies LLC, our parent company, for legitimate administrative and legal purposes; and in connection with a business transfer, such as a merger, acquisition, or sale of company assets.
We do not share personal information with business partners or advertisers, and we do not sell personal information for monetary or other valuable consideration.
In Short: We use one essential cookie to keep you logged in. We do not use tracking, advertising, or analytics cookies.
We use a single, strictly necessary cookie to maintain your authenticated session after you log in. This cookie is required for the Services to function and cannot be disabled while remaining logged in. We do not use Google Analytics, advertising cookies, tracking pixels, or any similar technology for marketing or profiling purposes.
We do not currently offer registration or login through Facebook, Google, or any other third-party social media account. This Policy will be updated if that changes in the future.
In Short: Yes. Our servers and all of our third-party service providers are located in the United States.
Our servers are located in the United States, and the third-party service providers described in Section 4 are also located in the United States. If you are located in the EEA, UK, Switzerland, or Canada, your information will necessarily be transferred to, stored in, and processed in the United States. Where applicable, this transfer is conducted in reliance on the European Commission's Standard Contractual Clauses, as incorporated into the standard terms of our third-party service providers.
In Short: We keep your information for as long as you maintain an account with us.
We retain personal information for as long as your account remains active, and for a reasonable period thereafter for legitimate business and legal purposes. We do not currently operate an automated data deletion schedule tied to account inactivity; if you wish to have your account and associated data deleted, please contact us at info@dawaristech.com.
We do not knowingly collect data from or market to individuals under 18 years of age. The Services are intended for business use by adults. If we learn that we have collected personal information from someone under 18, we will take reasonable steps to delete that information and deactivate the associated account.
Depending on your location, you may have the right to: request access to the personal information we hold about you; request correction of inaccurate information; request deletion of your personal information; and, where applicable, withdraw consent to our processing of your information.
To exercise these rights, please contact us at info@dawaristech.com, or by mail at 8 The Green STE A, Dover, DE 19901, United States. Where our processing of a connected business's customer data is concerned, we act as a service provider on that business's instruction; requests concerning that data should generally be directed first to the business whose Services you used, though we will assist as required by applicable law.
Some browsers include a "Do Not Track" (DNT) signal. No uniform standard for recognizing DNT signals currently exists, and we do not currently respond to them. Because we do not use tracking or advertising technologies in any event, our Services do not engage in the tracking that DNT signals are designed to address.
In Short: Yes, residents of certain US states have additional rights under applicable state privacy laws, including the right to access, delete, and correct their personal information, and the right to non-discrimination for exercising these rights.
We process the categories of personal information described in Section 1 for the purposes described in Section 2. In the preceding twelve months, we have disclosed the following categories of personal information to the third-party service providers named in Section 4: identifiers (such as name and email address), financial information (including account access details), and, where applicable, internet activity (log and usage data). We do not sell personal information, and we do not use personal information to make automated decisions or to build behavioral profiles about individuals.
Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia may have rights under their respective state privacy laws to access, delete, correct, or obtain a copy of their personal information, and the right to not be discriminated against for exercising these rights. To exercise these rights, please contact us at info@dawaristech.com.
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date, and we will notify you by email at the address on file with your account, consistent with our Terms of Service.
If you have questions or comments about this Policy, you may contact us at:
Dawaris Technologies LLC (d/b/a Retryd)
8 The Green STE A
Dover, DE 19901
United States
Phone: +1 (803) 945-4294
Email: info@dawaristech.com
You may review or update the information in your account at any time by logging into your account settings. To request deletion of your personal information or your account, please contact us at info@dawaristech.com.