Although that may be the case, your privacy policy and terms of service appear to be identical.

Furthermore, you have specified governing jurisdiction but have (as far as I can ascertain) provided no information regarding any legal entity to which this service pertains.

While GP’s statement was exaggerated, granting your Stripe API to a random internet service with what appears to be no accountability is not a good idea.