3 ms·
Under ChargeBee's terms, they must provide you with your data for up to 120 days following any termination. So there's that at least. > 7.2.3. Data Export Foll
by brightball 4y ago
Under ChargeBee's terms, they must provide you with your data for up to 120 days following any termination. So there's that at least.
> 7.2.3. Data Export Following termination or expiration of a Subscription, We will retain that Account’s Service Data for one hundred twenty (120) days from such date of termination or expiration (“Data Retention Period”).
I mean, ideally we need an open source PCI compliant equivalent of ChargeBee so that you can 100% own your customers payment information.
That's the way this problem really gets solved, but the security surface for that open source project is going to be a challenge.
- hinkley 4y agoSLAs only entitle you to a refund, not compensation for lost income. If you’re not making at least four times as much off a service as you pay for it, you really need to think about why you use that service. Power can go out. Promises from the power company don’t fix that. Only backup power does.
- brightball 4y agoPoint here was that you’d hypothetically be able to get all of your data to setup an alternative if you had to, rather than just being shut down and waiting for them to fix it.
- hinkley 4y agoOnce you trust your vendors absolutely, your company becomes their company, because they can do whatever they want with it. What always confuses me about this is that it seems like many owners trust their vendors over their own employees and I don't even know where to start unpacking that sentence.
- connordoner 4y agoThe problem with that idea is that PCI compliance doesn't just include the software you're running, but the infrastructure you run it on, various elements of organisational security and, of course, certification costs.