UK Subscription Notices is a Stripe app that sends renewal reminders, hosts a cancellation page, and keeps a record of both. This page says exactly what it stores and why.
The merchant who installs the app is the controller of their customers' data. We act as a processor on their instructions. We do not sell data, we do not use it to train anything, and we do not use it for any purpose other than producing and evidencing the notices the merchant has configured.
| Data | Why |
|---|---|
| Stripe account ID, business name | To know which merchant an install belongs to and to brand their emails. |
| Subscription ID, status, renewal date, billing interval, amount and currency | To work out when a reminder is due and what it must say. |
| Customer ID and email address | An email address is where the notice goes. Nothing else about the customer is read. |
| Each notice: when scheduled, when sent, the subject and body as sent, and a SHA-256 hash of that body | This is the evidence. A regulator asks what was sent and when; a hash alone cannot answer that, so the text is kept too. |
| Delivery events from the email provider | To record whether a notice was delivered, bounced or opened. |
| Cancellation requests, with IP address and browser user agent | To evidence that a customer could exit, when they asked, and what happened. |
We do not receive or store card numbers, bank details or payment credentials. The app's Stripe key is restricted: it can read subscriptions, customers and prices and cancel a subscription. It cannot move money.
The record is the product, so it outlives the installation: uninstalling the app stops new notices and cancels pending ones, but does not erase what already happened. The audit log is append-only and enforced as such by the database — entries cannot be edited or deleted, including by us. A merchant who wants their data removed entirely can ask at support@hodolist.com and we will delete it, understanding that this destroys the evidence it exists to provide.
| Processor | Purpose | Where |
|---|---|---|
| Resend | Sending notices and reporting delivery | United States |
| Neon | Database | European Union (Frankfurt) |
| Fly.io | Application hosting | United Kingdom (London) |
| Stripe | Source of subscription data | Per Stripe's own terms |
Every reminder contains a signed link to a cancellation page that needs no login. Only a hash of each link is stored, never the link itself, so a copy of our database does not yield working cancellation links. Links are single use and expire after 30 days, and every attempt to use one is logged, including expired and repeated attempts.
support@hodolist.com
This tool helps you implement and evidence your obligations. It is not legal advice. The UK subscription contracts regime is subject to secondary legislation which may change these requirements.