What we read,what we change.
The free churn report reads Stripe and changes nothing. After that, every change is one you approved.
North Metric reads Stripe through a Stripe App, never card numbers.
Customers, subscriptions, prices, discounts, invoices, charges and payment method metadata. The free churn report changes nothing. Stripe lists read and write permissions together at install. Changes stay off until an Owner turns on actions, and every change is approved or set by a rule.
What the appcan read.
Stripe lists read and write permissions together at install, each with a plain reason. These are the reads, and the free churn report uses nothing more.
| WHAT WE READ | WHY |
|---|---|
| Customers and subscriptions | Who pays, on which plan, and any cancel scheduled |
| Prices and discounts | Old prices and forever discounts, in $/mo |
| Invoices | MRR, usage MRR and every Kept MRR line |
| Charges | Failed payments and the decline code behind each |
| Payment method metadata | Card brand and expiry, never the card number |
What we can change,and when.
Nothing until an Owner turns on actions in Settings, on the trial or the plan. Then only what you approve, or what a rule you set allows.
Card data neverreaches us.
Cards are typed only into Stripe’s own card form and go straight to Stripe, which holds them.
When a customer updates a card from a North Metric note, the page uses Stripe’s card form.
3D Secure runs on the page. These pages carry no third-party scripts or tracking.
Each link is unique and signed.
It opens only that customer’s page and expires after one use or 30 days, or 60 for a win-back restart.
Emails fromyour own domain.
Once your domain is verified, notes go out in your name from your own address, not from ours.
Verification sets up SPF, DKIM and Return-Path, so mail is authenticated as yours.
Replies come back through North Metric to your inbox.
Until your domain is verified, drafts are ready to copy and send yourself.
No email is open-tracked.
Your data,your exit.
Export everything as a ZIP of CSVs at any time, or delete your account and its data.
Deleting your account removes customer-type metadata from Stripe and purges backups within 30 days.
You accept terms, a privacy policy and a data processing agreement at sign-up.
Sign in with email and password, Google or a magic link, with two-factor through an authenticator app.
Usage sources like PostHog and Stripe Meters are covered on integrations.
Questions aboutsecurity.
Stripe gives each app one set of permissions, so the install screen lists everything the paid plan can use. The free churn report only reads. Write permissions stay unused until an Owner turns on actions in Settings. Actions aren't available on the free plan.