Your Stripe account, handled carefully.
Flatfight reads dispute data and submits evidence only when you approve it. Here is exactly what we access, where it lives and how long we keep it.
EU hosting
Application, database and files run on Hetzner servers in Helsinki, Finland. Backups are encrypted before they leave the server and stay in the EU.
Encryption
TLS for every connection. Stripe tokens and API keys are encrypted at rest (Fernet: AES-128 with HMAC) with keys kept outside the database, and are never written to logs.
Draft and approve
Nothing is sent to your Stripe account without your click. Optional autopilot only submits strong cases 48 hours before a deadline, and you can turn it off any time.
Audit log
Every submission, acceptance, edit, connection change and setting change is recorded with who did it and when. The log can't be edited, and you can read it in the app.
AI with guardrails
Claude (Anthropic) writes summaries only from the facts we gathered. Every sentence must cite those facts, and a checker rejects anything else. Under Anthropic's commercial terms, this data isn't used to train models.
Your data, your call
Choose how long we keep dispute data, export everything as a ZIP, or delete your account and all its data from Settings.
Permissions
What we can touch in Stripe, and why.
This is the complete list. We don't request access to payouts, balances or transfers, and we can't create charges or refunds.
| Stripe resource | Access | Why |
|---|---|---|
| Disputes | Write | Read your disputes, and submit evidence or accept a dispute only when you click Submit or Accept (or when you turn on autopilot). |
| Charges and Refunds | Read | Read the disputed payment, card checks (CVC, address, 3D Secure), refunds, and the customer's earlier undisputed payments for Visa Compelling Evidence 3.0. |
| Customers | Read | Read the customer's name, email and billing address to identify them in evidence. |
| PaymentIntents | Read | Link each dispute to its payment and read the authentication result. |
| Invoices | Read | Read the invoice for the disputed payment (what was billed, and when). |
| Subscriptions | Read | Read the subscription's billing period and cancellation date for 'subscription canceled' disputes. |
| Products | Read | Describe what the customer bought. |
| Prices | Read | Read the price and billing interval of what the customer bought. |
| Checkout Sessions | Read | Show that the customer accepted your terms of service at checkout, where you collect that consent. |
| Files | Write | Upload the evidence documents Flatfight prepares, only when you submit a dispute response. |
| Events | Read | Be notified about new and updated disputes as they happen. |
Data
What we process.
- Dispute, payment and customer details from your Stripe account (name, email, billing address, card checks). Never full card numbers.
- Activity you send us (customer email or Stripe id, event type, time, IP, user agent, device and account id).
- Policies and support messages you add, and the evidence documents we generate.
Retention
How long we keep it.
Decided disputes, their evidence and your activity data are deleted automatically after your retention period (6 to 36 months, default 18). Open disputes are never deleted early. Disconnecting Stripe deletes the stored credentials immediately. Deleting your account removes all data and files right away; encrypted backups are overwritten within 60 days.
The free calculator never stores your API key: it's used once, in memory, and discarded.
Subprocessors
Who else handles data.
We notify account owners 30 days before adding a subprocessor. Full terms are in the DPA.
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| HetznerHetzner Online GmbH, Gunzenhausen, Germany | Hosting of the application, database, generated files and encrypted backups | Helsinki, Finland (EU) | Within the EEA |
| AnthropicAnthropic, PBC, San Francisco, United States | Drafting the written summary of an evidence package from the facts we gathered | United States | Standard Contractual Clauses |
| ResendPlus Five Five, Inc., San Francisco, United States | Sending sign-in links and dispute notifications to your team | EU sending region (Ireland); provider based in the United States | Standard Contractual Clauses |
| SentryFunctional Software, Inc., San Francisco, United States | Error monitoring | EU data region (Germany); provider based in the United States | Standard Contractual Clauses |
Billing: your Flatfight subscription is sold by Link, a Stripe company, which handles your payment details under its own privacy policy. We don't share any of your customers' data with Link.
Found a security issue?
Email us. We aim to reply within two business days, and we credit reporters who want it.