Last updated September 27, 2026
Draft, pending legal review. This describes how Detractr actually behaves today, but hasn't been reviewed by counsel and doesn't yet name a finalized legal entity or jurisdiction — ticket 02 covers that. Treat this page as accurate about the product, not yet as a signed, binding document.
Detractr sends NPS surveys to a SaaS company's (a "Workspace"'s) paying customers, triggered by billing events read from that Workspace's own Stripe account. This policy covers two separate relationships: Detractr and the Workspace (our direct customer), and Detractr and the Workspace's own customers (whose data we process on the Workspace's behalf — see our DPA for that relationship specifically).
Account email and password (hashed, never stored in plain text), Workspace name, and billing details handled directly by Stripe — we never see or store a card number.
If you join the waitlist we store your email address, where on the site you joined from, and when you confirmed it — to send you the confirmation email you asked for and, once, an email when it's your turn. We don't sell it or use it for anything else. To be removed, email hello@detractr.com and we'll delete it.
Strictly the fields ADR-0003 lists, because each one is a real GDPR processor obligation, not a convenience: Stripe customer id, email, name, first and last successful payment date, subscription status, whether a subscription is set to cancel at period end, and MRR. Nothing else — no payment methods, no card numbers, no full transaction history.
To decide, once a day, which of a Workspace's customers are due a survey (the "Sweep"), to show a Workspace its own Detractors queue sorted by MRR, and to let a founder see who wrote what before replying to them.
See our data retention position for the specifics. In short: disconnecting a Stripe Connection or closing a Workspace hard-deletes everything mirrored beneath it immediately — deletion is a feature of this product, not a request you have to make.
Stripe (both for reading a Workspace's own account, read-only, and for Detractr's own billing), our hosting provider (Vercel), and our bulk email delivery provider once one is in place. We'll list the email provider here once ticket 02/14 select one.
A Workspace can export, correct, or delete its own data at any time from within the product — disconnect a Connection or close the Workspace itself (Billing → Danger zone). A Workspace's own customer who wants their mirrored data corrected or removed should contact that Workspace directly; we act as their processor, not their contact point.
privacy@detractr.com (routing to be confirmed once ticket 02's domain/DNS work is complete).