Built to read, never to touch your money
Lucrovia only needs to look at your billing data. Here is how we keep it safe.
Read-only by default
The scan runs with read-only access through Stripe's official OAuth. Fixes need a separate, limited permission that you grant per fix type. Refunds and payouts are never possible.
Encrypted everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256.
Hosted in the EU
Your data is processed and stored in data centers in the European Union.
You approve every action
Every email, retry or plan change waits for your approval. On the Performance plan you can switch on automatic fixes per leak type.
Least data needed
We only read the billing objects needed to find leaks. No card numbers ever reach Lucrovia.
Delete any time
Disconnect Stripe and request deletion, and all your data is removed within 30 days.
Questions from your security team? Write to [email protected].
Bring your security questions to the call
We are happy to walk your team through permissions and data handling.