Your revenue data. Sealed in your name.
Export every purchase, subscription, and event on any plan, normalized, portable, and never sold or shared. Ownership you can hand an auditor.
Your customers, your data, your control
Full export on every plan, no gate, no upsell
Purchase and subscription records are yours from the first event. Pull them all (free tier included) as normalized CSV and JSONL. No third party ever gets a copy.
Any plan, full export
One click pulls every record, free tier included.
Normalized & versioned
Stable schema you can diff and replay.
No lock-in
Leave with everything; nothing is held hostage.
Portable formats
CSV + JSONL that load anywhere.
Data residency
Pin where your revenue data lives
Choose the region your records are stored and processed in, and keep them there. One default today (eu-central), region routing on Enterprise.
Ask sales which regions are live for your plan. We name only what we run.

Isolation
Row-level isolation, enforced in the database
Every tenant's rows are fenced off with Postgres row-level security. A query can only ever see its own revenue data, cross-tenant reads return zero rows, by policy, not by hope.
Compliance posture
Ownership your auditors can walk
Portability, built in
Answer a GDPR portability request with one export, any plan.
Auditable by design
A complete, replayable event history your auditors can walk.
Yours to leave with
No egress fee, no lock-in, take your data and go, anytime.

Guarantees
Strict by default
Own your data, satisfy your auditors
Paywalls, validation, and analytics, with residency, a full audit trail, and one-click export on every purchase record you keep.