The Stripe API key you paste is never stored. It is held in memory for the single request that generates your report, used to make read-only calls to Stripe's API on your behalf, and discarded when the response is sent. It is not written to a log, a database, a file, or any third-party service. We have no way to retrieve it after your report is generated, because we never kept it.
We recommend creating a new restricted key scoped only to Read access on the resources listed on the audit page, and revoking it after you've read your report — the audit needs no standing access.
The report itself (the checks and their pass/warn/fail status) is generated and returned to you directly; we do not retain a copy.
Your email address and payment details for the $49 charge are processed by Stripe; we do not store card numbers ourselves. See Stripe's privacy policy.
Questions: use the contact details you provided at checkout.