Exactly what Lucrovia can read and change
Lucrovia connects as a Stripe App. Stripe shows you every permission before you install it, and you can remove the app at any time in your Stripe Dashboard.
| What | Stripe permission | What it is used for |
|---|---|---|
| Scan (always) | customer_read, | Reads billing objects to find the six leak types. Changes nothing. |
| Fix: failed payments | invoice_write | Retries an unpaid invoice on the day its card is most likely to go through, after you approve it. |
| Fix: expired discounts | subscription_write | Removes a discount from a subscription when its planned end date has passed. |
| Fix: missed upgrades | none, | By default Lucrovia only prepares the upgrade email. The optional automatic plan change at the next renewal needs subscription_write and notifies the customer first. |
| Fix: underpriced plans | subscription_write | Moves a subscription to a current price at its next renewal, only after you approve each account. |
| Fix: abandoned checkouts | none | Prepares a recovery email with a link back into checkout. Nothing changes in Stripe. |
| Fix: silent churners | none | Flags the account and prepares a check-in email. Nothing changes in Stripe. |
Write permissions are only requested for the fix types you switch on. Without them, Lucrovia stays read-only.
Emails are not sent through Stripe: they go out from your own domain through the email account you connect (Google Workspace, Microsoft 365 or SMTP), and only after you approve them.
What Lucrovia can never do
We never request these permissions, so Stripe does not allow them:
- Refunds and charges (
charge_write) - Payouts (
payout_write) - Payment methods and card details (
payment_method_write) - Transfers, balance, disputes and tax settings
- Deleting customers, products or prices
Approval, log and undo
Every fix waits for your approval. On the Performance plan you can switch on automatic fixes per leak type and switch them off again at any time. One switch pauses all actions at once.
Every action is written to an activity log with the Stripe object, the change, who approved it and when. Each entry shows how to undo it: a removed discount can be added back, a moved price can be moved back. A retried invoice cannot be un-charged by Lucrovia, because we cannot issue refunds; you do that in Stripe if needed.
Disconnecting
Remove the Lucrovia app in your Stripe Dashboard and our access ends immediately. Your data is deleted within 30 days and we confirm it in writing.
Try it in test mode first
You can install Lucrovia on a Stripe test mode account and run the full flow on the demo call, before you connect your live account.
Walk through the permissions with us
On the demo call we show every permission in Stripe test mode before anything touches your live account.