Extension Privacy

Main privacy policy/Stripe

Stripe Privacy Policy

Last updated March 11, 2026. The Stripe extension stores encrypted restricted API keys and syncs revenue analytics so TrustPortfolio can render Stripe-powered widgets selected by the user.

Provider

Stripe

Auth Type

API key

Sections

5 policy areas

1

Data collected

  • Encrypted live restricted Stripe API keys for each Stripe account the user connects.
  • Stripe account metadata needed to identify each connected account, including account ID, display name, country, livemode status, and default currency.
  • Billing and payment records returned by Stripe, including charges, refunds, invoices, subscription statuses, payment timestamps, and derived revenue trend data.
  • Derived widget snapshot data used to power Stripe analytics widgets on the dashboard and public portfolio.
2

How the data is used

  • Authenticate read-only requests to the Stripe API for the accounts the user chooses to connect.
  • Render Stripe widgets for revenue, payments, subscriptions, and billing trends.
  • Support aggregate views across multiple connected Stripe accounts and keep the synced data current through scheduled and manual syncs.
3

Storage and retention

  • Stripe restricted API keys and connected account metadata are stored in encrypted extension settings inside Convex.
  • Synced Stripe analytics data is stored in widget snapshots until later syncs replace it or the extension is removed.
  • TrustPortfolio stores enough Stripe metadata to distinguish which connected account each synced dataset belongs to.
4

Sharing

  • TrustPortfolio sends stored restricted API keys to Stripe only to request the read-only billing data the user has authorized.
  • Stripe-derived analytics may become public if the user adds Stripe widgets to public portfolio pages.
  • Stripe-derived data is also processed by TrustPortfolio infrastructure providers that host the application, database, and analytics stack.
5

User controls

  • Users can connect multiple Stripe accounts, sync them manually, or stop using the extension from the dashboard.
  • Users decide which Stripe widgets appear on their public portfolio.
  • Users can revoke or rotate restricted API keys in Stripe and reconnect the extension in TrustPortfolio.

Related policies

The main TrustPortfolio privacy policy explains the core app, hosting, analytics, and extension framework.

Open main privacy policy
Stripe Privacy Policy | TrustPortfolio