Data ownership

Your revenue data. Sealed in your name.

Your purchases, subscriptions, and events. Portable data, under your control.

cashsdk / data ownership Product preview
Export vault
Full export · every plan
never sold
purchases.csv4.2 MB
subscriptions.csv2.8 MB
events.jsonl18 MB
Never sold, shared, or used for training
your key

Your customers, your data, your control

Full export on every plan, no gate, no upsell

Export purchase and subscription records as normalized CSV and JSONL.

Any plan, full export

One click pulls every record, free tier included.

Normalized & versioned

Stable schema you can diff and replay.

No lock-in

Leave with everything; nothing is held hostage.

Portable formats

CSV + JSONL that load anywhere.

YOUR DATA / EXPORT PREVIEWInteractive sample
purchases.jsonl
{"id":"txn_024","product":"pro.yearly","amount":59.99,"currency":"USD"}
{"id":"txn_025","product":"pro.monthly","amount":9.99,"currency":"USD"}
{"id":"txn_026","product":"pro.yearly","amount":59.99,"currency":"USD"}
3 sample records · yours to keep

Data residency

Pin where your revenue data lives

Choose the region your records are stored and processed in, and keep them there. One default today (eu-central), region routing on Enterprise.

Ask sales which regions are live for your plan. We name only what we run.

eu-central · residency pinned
eu-central · live other regions · on request

Isolation

Row-level isolation, enforced in the database

Every tenant's rows are fenced off with Postgres row-level security. A query can only ever see its own revenue data, cross-tenant reads return zero rows, by policy, not by hope.

Encrypted at rest + in transitPer-tenant policy on every tableNever used to train models
Row-level security policy enforced
queryshared tableresult
tenant_a
1,204 rows
you
3,918 rows
tenant_b → tenant_a
0 rows
Cross-tenant reads return zero rows, by policy, not by hope.

Compliance posture

Ownership your auditors can walk

Portability, built in

Answer a GDPR portability request with one export, any plan.

Auditable by design

A complete, replayable event history your auditors can walk.

Yours to leave with

No egress fee, no lock-in, take your data and go, anytime.

Guarantees

Strict by default

100%Your data stays in your control
0Records ever sold or shared
1-clickFull export, every plan
ONE CONNECTED PURCHASE FLOW
CashSDK
CashSDK
Store receipt
pro active
A purchase startsproduct: "pro.yearly"A familiar checkout, in your app.
Illustrative flow no live transactions

Own your data, satisfy your auditors

Paywalls, validation, and analytics, with residency, a full audit trail, and one-click export on every purchase record you keep.