What Rescue collects, why, and what it never touches.
Rescue is operated by Hafid Boulaoutaq, registered as an auto-entrepreneur in Morocco under law 114-13, at [YOUR ADDRESS]. For anything in this policy, write to contact@rescuedunning.com.
Rescue handles data about two different groups, and the rules differ:
| Data | Why |
|---|---|
| Email address | Account access, billing, service notices |
| Company or store name | Sender identity on recovery emails |
| Platform API key | To read subscription and invoice status, and to generate card-update links. Stored encrypted at rest. |
| Email sequence settings | Wording and timing you configure |
| Basic usage logs | Debugging, abuse prevention, service reliability |
Payment for Rescue itself is handled by our payment provider. Rescue does not see or store your card details.
When a renewal fails, your platform sends Rescue an event containing:
Rescue uses this to send the recovery emails you have configured and to stop sending them once payment succeeds. It is not used for anything else — no profiling, no advertising, no resale, no training of machine-learning models.
For subscriber data, you instruct Rescue and Rescue follows. Concretely, Rescue commits to: process subscriber data only to run your recovery sequences; keep it confidential; apply appropriate technical and organisational security measures; assist you with subscriber requests to access, correct or delete their data; notify you without undue delay if a breach affects your data; and delete or return it when your account closes. If you need a signed data processing agreement, ask and one will be provided.
| Provider | Role |
|---|---|
| Supabase | Database and authentication |
| Resend | Email delivery |
| Contabo | Server hosting |
| Lemon Squeezy / Paddle | Source of the payment events |
Each is bound by its own contract to process data only as instructed. Rescue does not sell data, and does not share it with anyone beyond these providers except where the law requires it.
Data is stored on servers in the European Union. Rescue is operated from Morocco, so personal data of EU or UK subjects is transferred outside those areas. That transfer relies on the European Commission's Standard Contractual Clauses, together with the security measures described above.
If you are in the EU, the UK or a similar jurisdiction, you can ask for a copy of your data, correct it, delete it, restrict or object to its processing, or receive it in a portable format. Email contact@rescuedunning.com and you will get an answer within 30 days. You may also complain to your local data protection authority. Subscribers should contact the seller who emailed them; Rescue will pass on any request it receives directly.
The public website sets no tracking or advertising cookies. The application uses a single session cookie to keep you signed in. There is no third-party analytics on the marketing site.
Traffic is encrypted in transit. Platform API keys are encrypted at rest. Access to production data is limited to the operator and used only to run and repair the service.
Rescue is a business tool and is not directed at anyone under 16.
If this policy changes in a way that matters, sellers will be emailed before the change takes effect. The date at the top always reflects the current version.