Consent Tracking

// Frontend: Consent checkbox
<ConsentCheckbox
  type="recurring"
  planName="Pro Plan"
  amount="₹499/month"
  checked={consented}
  onChange={setConsented}
/>

// Backend: Store consent with subscription
const subscription = await recurso.subscriptions.create({
  customer_id: 'cust_abc',
  plan_id: 'plan_pro',
  consent: {
    granted: true,
    granted_at: new Date(),
    ip_address: req.ip,
    user_agent: req.headers['user-agent'],
    text: 'I authorize recurring charges of ₹499/month...'
  }
});

{
  id: 'con_xyz',
  customer_id: 'cust_abc',
  subscription_id: 'sub_xyz',
  type: 'recurring_billing',
  granted: true,
  granted_at: '2024-01-15T10:30:00Z',
  ip_address: '203.0.113.42',
  user_agent: 'Mozilla/5.0...',
  consent_text: 'I authorize recurring charges...',
  version: '1.0'
}

// The 24-hour RBI pre-debit notice is sent automatically by the built-in
// pre-charge scheduler for every UPI AutoPay mandate — there is nothing to
// enable. It fires ~24h before each scheduled debit; see the mandate lifecycle
// under UPI AutoPay.

Subject: Payment Reminder: Your subscription renews tomorrow

Hi {CustomerName},

Your {PlanName} subscription will automatically renew tomorrow.

Amount: {Amount}
Date: {ChargeDate}
Payment Method: Card ending in {Last4}

To modify your subscription:
[Manage Subscription]

To cancel:
[Cancel Subscription]

// Via API
await recurso.subscriptions.cancel('sub_xyz', {
  revoke_consent: true,
  reason: 'consent_revoked'
});

// Records consent revocation
{
  consent_id: 'con_xyz',
  revoked: true,
  revoked_at: '2024-02-15T10:30:00Z',
  revoked_by: 'customer'
}

// Consent history for a customer:
//   GET /v1/customers/{id}/consents
const res = await fetch(`${BASE_URL}/v1/customers/cust_abc/consents`, {
  headers: { Authorization: `Bearer ${API_KEY}` },
});
const { data: consents } = await res.json();

// Each consent record carries its own grant/revoke trail. Records are
// created with POST /v1/consents and withdrawn with POST /v1/consents/revoke;
// the full history reads back from GET /v1/customers/{id}/consents. The
// append-only audit log (POST/PUT/DELETE across the API) captures the actor,
// IP, and timestamp of every change — see /advanced/webhooks and the audit
// log in the dashboard.