A button in your own admin produces one zip: every area as a CSV, your settings, and a written guide to running the platform somewhere else. Your manager does it, not us, and every export is logged. There is no request to raise and no notice period to serve.
Card details are entered directly into Stripe's own fields. They do not pass through our forms, our servers or our database at any point, which is what keeps the compliance burden with Stripe rather than with your charity.
Analytics and ad tags never run on the page where card details are entered, and everywhere else they run only after a supporter agrees. There is a test in the codebase that fails if that stops being true.
Abandoned checkouts are deleted after 90 days, analytics after 13 months, notification logs after 90 days. Nobody has to remember to do it, and the privacy policy is checked against what the code actually does.