Skip to main content
Airdun reads your Stripe account for analysis and makes two kinds of write: setting a newly entered card as a subscription’s default, and, when adaptive retries are on for a use case, paying an open invoice with the card already on file. It does not read full card numbers or bank details, does not share your customer data with other merchants, and does not use it for any purpose other than running your recovery sequences. Access can be revoked at any time from your Stripe dashboard.
Airdun requests the minimum Stripe permissions necessary to identify failed payments and run recovery. Specifically, it reads:
  • Payment intents and charges — to detect failures and understand the reason codes
  • Customer records — to identify the customer, their history, and their locale for message personalization
  • Subscriptions and invoices — to understand the context of the failure and include the correct invoice in recovery messages
  • Payment method metadata — card brand, expiry, funding type, and last four digits (never the full card number or CVC)
  • Products and prices — to name what the customer subscribes to
  • Customer and subscription metadata — only for the fields you map in Customer enrichment, if you use Stripe metadata as its source
Customer records include the name, email, phone, billing country, and preferred language, used to pick the language, time zone, and channels.Airdun makes two kinds of write:
  • Saving the new card as default — when a payment fails on a use case you have put live, Airdun sets the subscription to keep the card the customer pays with as its default, so future renewals use it.
  • Paying an invoice (adaptive retries) — when adaptive retries are on for a use case (they are by default for Renewals and Free trials; New customers has none), Airdun can pay a failed invoice through Stripe, with the payment method already on file, at a moment Stripe’s own schedule misses. It is the same charge Stripe’s retries would make, on the same invoice, for the same amount. Stripe’s own retries keep running under your retry policy; adaptive retries come on top, never instead. You turn them on or off per use case, under Autopilot → [use case] → Adaptive retries.
Airdun cannot modify plans, issue refunds, update pricing, create new charges outside an existing invoice, or make any other change to your account.
No. Airdun never stores, logs, or processes full card numbers, CVCs, or complete bank account details.Card data lives exclusively in Stripe’s PCI-compliant vault. Airdun works with tokenized references and metadata (such as card brand, expiry month/year, and last four digits) — the same information visible in your Stripe dashboard. No raw payment credentials pass through or are stored in Airdun’s systems.
Yes, at any time and without contacting Airdun support. You can revoke access directly from your Stripe dashboard under Settings → Apps. Removing Airdun’s connection immediately ends all Stripe API access.After access is removed, no further messages are sent, no retries are made, and the in-app wall stops showing. Open cases are no longer updated. If you reconnect Stripe, messages and the wall pick up again.If you cancel your Airdun subscription, Airdun stops sending messages. To end its access to your Stripe account, also remove the Airdun app from your Stripe Dashboard.
No. Your customer data is processed solely to run recovery sequences for your account. It is never shared with, sold to, or made accessible to other Airdun merchants in any form.
Airdun hosts all customer data on Google Cloud infrastructure in the Paris region (europe-west9), within the European Union.This means your data and your customers’ data remains within EU jurisdiction and is subject to GDPR-compliant data handling practices throughout its lifecycle. Data is encrypted at rest and in transit.
No. Your data and your customers’ data is used for one purpose only: running and improving your payment recovery sequences. Airdun does not use any data it processes for advertising, profiling, or any commercial purpose unrelated to recovery.This applies to both your business data and your customers’ personal data. We do not sell data to third parties or use it to target ads on any platform.
All customer data processed by Airdun is hosted on Google Cloud in the Paris, EU region. If you have specific data residency requirements or need a Data Processing Agreement (DPA) for GDPR compliance, contact your account team or refer to our Privacy Policy.
For the full details of how Airdun collects, processes, and protects data, see the Privacy Policy.