The EU's General Data Protection Regulation (GDPR) provides customers control over their personal information that businesses store and handle, without trade offs.


Chargebee as a Data Controller


To fulfill legal obligations under GDPR, as a data controller, we have performed the below steps:


  • Data Categorization and Analysis, to track the flow of personal data through our systems.

  • Data Retention - By establishing an automated data retention mechanism, we clear the customer’s Personally Identifiable Information (PII), and all end-user data from our databases, within a period of 120 days.

  • Consent Mechanism - we collect consent from our customers wherever it’s applicable, and also provide an easy way to withdraw it.



Chargebee as a Data Processor


To aid the Chargebee users to be GDPR compliant, we provide 


  • Consent Management: This feature allows you to obtain and revoke explicit consent from your customers and manage it within Chargebee. More on this here.

  • Personal Data Management: Chargebee gives you full control over how personal data of your customers is retained on our systems or erased from it. More on this here.