What leaves your site, and when
SSA makes exactly four kinds of outbound call. Everything else it does stays inside your own WordPress database.
Every outbound call, at a glance
| Where | When | What |
|---|---|---|
| Stripe | Every sync (scheduled or manual), when testing a connection, and when connecting a key. | Read-only requests for your Customers, Subscriptions, Charges, Invoices and Prices. Nothing is ever written back to Stripe. |
| freecurrencyapi.com (exchange rates) | After a sync, at most once a day per currency, and only once SSA has seen more than one currency and you have saved an API key. | Your majority currency code, and your API key in a request header. The reply is that day's exchange rates. |
| Sentry (opt-in error reports) | Only while Send anonymized error reports to the developer is on, in Settings, Diagnostics, and only for errors raised inside SSA's own code. | The error message, file and line, plus the PHP and plugin version. Emails, names, API keys and similar fields are replaced with placeholders first. |
| The weekly digest email | On the day and hour you choose in Settings, Email Digest. Off until you turn it on. | Sent through your own site's outgoing mail to the addresses you list, not to SSA. It contains this week's MRR and its change, new subscribers, cancellations, churn and ARPU. |
Stripe: read-only
SSA only lists and reads data from Stripe; it never creates, updates or deletes anything there. A restricted key with read access to Customers, Subscriptions, Charges, Invoices and Prices is enough (Products read is optional, for plan names).
Exchange rates from freecurrencyapi.com
Once SSA has seen a second currency, and once you have saved a free API key from freecurrencyapi.com, it asks that service for the day's exchange rates. Only your majority currency code and your key are sent; no customer data leaves for this call. The rates are cached, and refetched at most once every 24 hours.
Opt-in error reports
When Send anonymized error reports to the developer is on, a short, scrubbed record of any error raised inside SSA's own files is sent to the developer's error-tracking project: the message, the file and line, and your PHP and plugin version. This toggle is on by default in this pre-release build; README states the public release is intended to default it off.
The weekly digest email
The weekly digest is off by default. Once you turn it on and add at least one recipient address, it goes out through your own site's mail, on the day and hour you choose, to the addresses you listed and nobody else.
