Stripe Fee Auditor

1. Overview

Stripe Fee Auditor ("we", "our", "the Service") is a tool that analyzes Stripe Balance CSV exports to help you understand your fee structure. We are committed to handling your data with care and transparency.

2. Data We Collect

CSV file content

When you upload a Stripe Balance CSV, the file is transmitted to our server over an encrypted HTTPS connection, processed in memory to generate your analysis, and is not stored as a raw file on disk. Parsed values are used only to compute the report.

Analysis results

The computed analysis (fee totals, rates, anomalies, etc.) is stored in our database and linked to a random report ID plus a private access token you receive in the URL. Free preview reports expire about 1 hour after creation. If you complete a purchase, we extend access so your report remains available for up to 30 days from the time of payment. Stored results are derived from your CSV — not a full copy of the file.

Email address

If you provide your email (for example at the report gate or checkout), we use it to reach you about your report (for example a link after payment). We do not send marketing email. We do not sell or share your email with third parties for their own marketing.

IP address

We log your IP address for rate limiting (to prevent abuse of the free tier). Rate limit records are deleted after approximately 2 days.

Analytics

We do not use third-party cookie-based behavioural advertising on this site at launch. If we add privacy-friendly, aggregate-only analytics later, we will update this policy and list the provider here.

3. How We Use Your Data

To generate your fee analysis report
To send transactional messages about your report (when email is provided and a mail provider is configured)
To enforce rate limits and prevent abuse
To operate payments and unlock paid features

We do not use your financial data for advertising, profiling, or any purpose beyond providing the Service.

4. Third-Party Services

We use the following infrastructure and service providers (their own policies apply):

Vercel — hosting and edge infrastructure (vercel.com/legal/privacy-policy)
Neon — PostgreSQL for report metadata and analysis results (neon.com/privacy-policy)
Polar - payment processing (polar.sh/legal/privacy)
Resend — transactional email delivery when enabled (resend.com/legal/privacy-policy)

We only share with them what is needed to run the Service (for example payment receipts, report identifiers you pass at checkout, or an email address you give us).

5. Data Retention

Data	Retention
Raw CSV file	Not stored as a file; processed in memory for the request
Analysis result (free / unpaid access)	Expires about 1 hour after the report is created (may be briefly extended during checkout)
Analysis result (after successful payment)	Up to 30 days from payment, then deleted automatically
Email address	Kept only while the corresponding report row exists; deleted when the report expires
IP address (rate limit)	Deleted after about 2 days

6. Security

Data is transmitted over HTTPS. CSV content is processed on the server for analysis and is not written to a public bucket. Report access uses a secret token in addition to the report ID. We use rate limiting and other controls to reduce abuse.

7. Your Rights

You may request deletion of the stored analysis associated with your report by contacting us and providing your report ID (and any access details we need to verify your request). Rows are also removed automatically when they expire. We do not operate a user account system, so there is no separate "profile" beyond what is tied to an active report row.

8. Children

The Service is not directed at children under 13. We do not knowingly collect data from children.

9. Changes

We may update this Privacy Policy. Material changes will be reflected in the "Last updated" date above. Continued use of the Service after changes constitutes acceptance where permitted by law.

10. Contact

For privacy-related questions or data requests, contact us at: ksantor19811606@gmail.com