Question 1

Is it safe to connect FreezeAlert to my Stripe account?

Accepted Answer

Yes. FreezeAlert connects using read-only Stripe API scopes. We can read your events and account metrics, but we cannot initiate payments, move funds, issue refunds, change payout schedules, or modify any configuration. The worst-case access scope is equivalent to giving an accountant view-only access to a bank statement.

Question 2

What Stripe data does FreezeAlert access?

Accepted Answer

We read payment, charge, refund, dispute, payout, and balance-transaction events — the same data you see in the Stripe dashboard. We do not access raw card numbers, CVVs, or any PCI-sensitive cardholder data. Stripe never exposes that information through its API.

Question 3

Where is my data stored and for how long?

Accepted Answer

Data is encrypted at rest in US-region Postgres and encrypted in transit with TLS 1.2 or higher. We retain event data for 13 months to compute rolling baselines, after which it is automatically purged. You can request immediate deletion of all account data at any time.

Question 4

How do I revoke FreezeAlert access?

Accepted Answer

You can revoke access instantly from two places: disconnect the integration from the FreezeAlert settings page, or rotate the restricted API key directly from your Stripe dashboard. Either action immediately stops all data collection, and deletion of stored data can be requested at support@freezealert.app.

Question 5

Are you SOC 2 or GDPR compliant?

Accepted Answer

FreezeAlert is built on SOC 2 practices from day one — least-privilege access controls, audit logging, encryption at rest and in transit, and vendor security reviews. A formal SOC 2 Type II report is in progress. We are GDPR-compliant, process no EU personal data beyond the operator contact, and maintain a public subprocessor list.

Question 6

Who can see my Stripe data inside FreezeAlert?

Accepted Answer

Only you and the teammates you explicitly invite to your workspace. FreezeAlert engineers do not access customer Stripe data in normal operation. Support access is opt-in, time-bound, and audit-logged when you request debugging help.

Built on read-only access

Non-negotiable Security

See your risk level in minutes.