Privacy Policy

TryZeus — RescueDunning

Version 2.0 — October 9, 2026

TRYZEUS LLC, a California limited liability company ("TryZeus," "we," "us," or "our"), provides the TryZeus website at rescuedunning.group and the RescueDunning service (together, the "Service"). This Privacy Policy explains what data we collect, why we collect it, and what rights you have.

For RescueDunning, you (the merchant) are generally the data controller of your End Customers' personal data, and TryZeus acts as your data processor, handling that data only on your instructions to provide the Service. This policy describes both roles.

---

1. Data We Collect

1.1 Account information (you, the merchant)

• Name, business name, and email address
• Billing details (name, email, and payment-method identifiers processed by Stripe, our payments provider — we do not store full card numbers ourselves)
• Login credentials (stored in hashed form)
• Support communications

1.2 Stripe Connect data (via OAuth)

When you connect your Stripe account, we access only what is needed to provide dunning, which may include:

• Stripe Customer records (including End-Customer email addresses and names)
• Subscription records and their status
• Invoice records and payment-attempt history
• Payment-method metadata (e.g., card brand, last four digits, expiry month/year) — we do not receive or store full card numbers, CVCs, or bank credentials

You can revoke our Stripe access at any time from your Stripe dashboard; doing so will disable the dunning features that depend on it.

1.3 End-Customer data processed on your behalf

We process your End Customers' email addresses (and, where present, names) solely to send the payment-recovery emails you configure. We do not use End-Customer data for our own marketing, sell it, or share it except as described in Section 4.

1.4 Operational and technical data

• Usage logs, error logs, and basic analytics (pages visited, features used)
• Device and browser information, IP address, and cookies strictly necessary for the Service to function (e.g., session cookies)

We do not use third-party advertising cookies or cross-site tracking.

2. Purposes of Processing

We use the data above to:

• Provide, operate, and maintain the Service (including sending dunning emails you configure);
• Bill you and manage your subscription;
• Provide customer support and respond to your requests;
• Detect, prevent, and investigate fraud, abuse, and security incidents;
• Comply with legal obligations (tax, accounting, law-enforcement requests);
• Improve the Service (using aggregated, de-identified data where possible).

We do not sell personal data, and we do not share personal data for cross-context behavioral advertising.

3. Legal Bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and — for End-Customer emails — on your instructions as our customer (you are responsible for having your own lawful basis, such as consent or legitimate interest, for emailing your customers).

4. Service Providers and Sharing

We use service providers for hosting and data storage, authentication, payments and billing, email delivery, and security. We share only the personal data they need to provide these services.

We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, or property of TryZeus, our customers, or others. In the event of a merger, acquisition, or sale of assets, data may transfer to the successor entity, subject to this policy's protections.

5. Data Retention

• Account data: kept for the life of your account, plus up to 3 years afterward for tax, accounting, and legal purposes.
• Stripe/dunning data: kept while your account is active; on closure, we delete or anonymize operational copies within 90 days, except where retention is required by law.
• End-Customer email addresses: processed only while needed to send your configured sequences; deleted per your instruction or on account closure (subject to the 90-day window above).
• Backups: residual copies in encrypted backups are overwritten on the normal backup rotation cycle.

6. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and (in California) to know what we collect and to opt out of any "sale" or "sharing" of personal data (we do neither).

To exercise these rights, email privacy@rescuedunning.group from the email address on your account. We will respond within the timeframes required by applicable law (generally 45 days). We will not discriminate against you for exercising your rights.

If you are one of our merchant customers' End Customers and want to access or delete your data, please contact the merchant directly — we will act on the merchant's verified instructions.

7. Security Measures

We protect data with commercially reasonable safeguards, including:

• Encryption in transit (TLS) and encryption at rest for stored data;
• Access controls and least-privilege principles for our systems;
• Hashed credential storage;
• Regular dependency updates and monitoring for suspicious activity.

No system is perfectly secure. If we discover a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.

8. International Transfers

Our infrastructure is hosted in the United States. If you use the Service from outside the U.S., your data will be transferred to and processed in the U.S. Where required, we will rely on appropriate transfer safeguards (such as Standard Contractual Clauses).

9. Children's Data

The Service is a business tool and is not directed at children under 13 (or the higher age threshold in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@rescuedunning.group and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will post the new version at rescuedunning.group/privacy with a new version number and date. Material changes will be communicated with at least 30 days' notice. Continued use of the Service after the effective date constitutes acceptance.

11. Contact

Data controller/processor: TRYZEUS LLC.

• Privacy questions and rights requests: privacy@rescuedunning.group
• General support: support@rescuedunning.group