How CancelCheck works

The method, the boundaries, and how your data is handled.

CancelCheck is built to be checked. This page explains who produces the scans, the repeatable process behind each one, exactly what we collect and what we do not, and the line between compliance information and legal advice. If you are deciding whether to submit your flow or refer a client, this is the page to read first.

State law matrix last reviewed: September 2026. Re-verified quarterly.

Who builds the scans

CancelCheck was founded by Jason White, who holds a JD from Rutgers Law and an undergraduate degree from Dartmouth, with prior work in contract and legal-technology settings across BigLaw and financial services.

CancelCheck is deliberately not a law firm. Jason is not currently practicing law, and no scan is the practice of law or the provision of legal advice. That is a feature of the model, not a limitation: it lets CancelCheck deliver a consistent, state-by-state compliance read at a price accessible to businesses that would otherwise be priced out of a formal legal review, and it keeps the service scalable across states without practicing law in states where no one here is admitted. When a business needs a legal opinion on its specific facts, CancelCheck refers to licensed partner counsel.

The six-step method

Every scan follows the same sequence. The point of a fixed method is that two merchants with the same flow get the same read, and that the output can be defended line by line.

Scope

Identify the states where the merchant has customers and the subscription characteristics that trigger obligations: plan terms, trial structure, billing frequency, and prepaid duration.

Inspect

Review the observable lifecycle end to end: checkout disclosure and consent, order confirmation, renewal and trial-conversion notices, the cancellation path and its step count, and any retention or save-offer sequence.

Map

Map what was observed against the applicable requirements in each in-scope state, drawn from the CancelCheck state matrix and the underlying statutes.

Assess

Identify where observed behavior departs from a requirement, and where it aligns. Aligned controls are reported too, so the merchant knows what to preserve.

Prioritize

Classify each finding by severity, weighted toward the provisions state enforcers have actually used, and note the owner and rough effort for each fix.

Remediate

Translate each finding into a concrete change for Product, Engineering, or Retention, with the statute cited beside it. The deliverable is a plan someone can act on, not a memo.

How your data is handled

A compliance service that is careless with your data has no business existing. Here is exactly what happens to what you send.

What we collect
What you submit in the scan form: your checkout URL, a description of your cancel flow, the states you sell into, platform, contact details, and any context you choose to add.
What we do not collect
We do not ask for customer records, payment data, or account credentials. A scan never requires access to your systems.
Training on your data
Your submissions are not used to train public AI models. Scan production uses AI as a drafting tool under human review; your specific flow is not fed into third-party model training.
Who sees it
Your submission is reviewed by CancelCheck to produce your scan. It is not sold, rented, or shared with third parties for their own use.
Retention
We keep your submission and the scan we produce so we can answer follow-ups and re-scan on request. You can ask us to delete your data at any time by emailing privacy@cancelcheck.io.
Aggregate patterns
We may study anonymized, de-identified patterns across many scans (for example, how often a given gap appears) to improve the service and to publish general benchmarks. Nothing that identifies your business is included.

Full detail lives in the Privacy Policy. Where this summary and the Privacy Policy differ, the Privacy Policy controls.

Compliance information, not legal advice

The boundary in one line: CancelCheck tells you where your flow appears to depart from state auto-renewal requirements and cites the statute. It does not tell you what to do about your specific legal situation, and reading a scan does not make CancelCheck your lawyer.

A scan is general compliance information applied to observable facts about your subscription flow. It is not legal advice, it is not a legal opinion, and it does not create an attorney-client relationship. Statutes change, enforcement priorities shift, and your specific facts may raise issues a lifecycle review cannot see. Before you rely on any finding, or if you have received a demand letter, a chargeback wave, or an inquiry from a regulator, consult licensed counsel in your jurisdiction. If you want that, CancelCheck can refer you to a partner attorney.

How the law stays current

The state matrix behind every scan is re-verified quarterly, on the first business days of January, April, July, and October, with each cited statute checked against its primary source. The last review date is shown at the top of this page and on each scan. When a material change lands between reviews, such as a new effective date or an enforcement action, it is incorporated as soon as it is confirmed against the primary source. This is the same discipline the scan asks of you: know what the rule is today, not what it was last year.

See it applied to a real flow.

Read a full sample report, then send your own checkout URL for a free scan.

View the sample report