I rewrote my cancel flow with one LLM call. It argues better than I do.
The cancel flow is where SaaS revenue goes to die politely. "Are you sure? You'll lose access to Premium features" has never changed a single mind - but reminding a user of their own 312 generations this month is an argument.
Last updated: 2026-06-10
The generic cancel modal has never changed a mind
The cancel flow is where SaaS revenue goes to die politely. Most apps show a generic "Are you sure? You'll lose access to Premium features" - a sentence so vague it has never changed a single mind. Here's the thing the generic modal can't do: remind the user what they specifically would lose. Not "Premium features." Their 312 generations this month. The workflow they run every Tuesday. That's an argument, and it can be generated per user at the moment they click "Cancel."
The implementation
I use Vevee (@vevee/sdk) for usage metering, so every user's real consumption is already sitting there. When someone opens the cancel flow, the server composes a save offer from it. The compose type's intent prompt: "The user is about to cancel. From their usage this period and their most-used features, list concretely what they lose, then suggest the smallest plan that keeps their top workflow. Be honest; never hide the cancel option." Data sources: user usage, user events, user attributes. Output: the SaveOffer schema in the snippet - output comes back as typed JSON, not prose to parse. Two very different users open the same cancel flow and see two very different arguments:
- A heavy user, the headline: "Before you go - you used 312 generations and 41 HD exports this month."
- What they lose: "Your product-shots workflow ran 18 times in the last 2 weeks" and "HD export isn't available on Free."
- The alternative: "If cost is the issue: the Starter plan keeps HD exports at half the price."
- A user who stopped using the product 6 weeks ago sees something else entirely: "Looks like you haven't used the app since April. Fair enough - Free keeps your projects intact if you ever come back."
import { createClient } from "@vevee/sdk";
const vevee = createClient({ apiKey: process.env.VEVEE_SECRET_KEY! });
interface SaveOffer {
headline: string;
whatYouLose: string[]; // concrete, from their usage
alternative: string; // e.g. "switch to Free and keep X"
ctaKeep: string;
ctaCancel: string; // always present - dark patterns lose long-term
}
const offer = await vevee.compose<SaveOffer>("cancel-save-offer", userId);
const content =
offer.status === "generated" ? offer.output : GENERIC_CANCEL_COPY;Wire the outcome into a funnel
The SDK's analytics side has reserved subscription events, so measuring save-rate is three captures. Saves (kept or downgraded) vs. subscription_cancelled, split by variant - that's your composed-vs-generic save rate in one dashboard funnel. And the subscription change itself is one SDK call, since Vevee manages the plan state too: vevee.upsertSubscription to move them to free, or cancelSubscription if there's no free tier.
await vevee.capture({ distinctId: userId, event: "paywall_shown",
properties: { surface: "cancel_flow", variant: "composed" } });
// if they take the downgrade instead of cancelling:
await vevee.capture({ distinctId: userId, event: "subscription_downgraded" });
// if they leave:
await vevee.capture({ distinctId: userId, event: "subscription_cancelled" });Guardrails, because cancel flows attract dark patterns
The generic cancel modal fails because it asks users to weigh "Premium features" in the abstract. The composed one puts their own last month on the scale. Different conversation entirely - but only if the flow stays honest, so three rules are non-negotiable:
- The cancel button is always rendered, always one click. The composed copy makes the argument; the user still leaves whenever they want.
- Opted-out users get the generic copy automatically - compose() returns { status: 'opted_out' } for anyone who opted out of AI personalization, and the discriminated union forces you to handle it.
- Cost is bounded by a monthly compose budget set in the dashboard. A cancel flow is low-traffic anyway; this is the cheapest surface you'll ever personalize. usage.costMicroUsd on each result tells you exactly what it cost.
More from the blog
The race condition in "if (usage < limit)" that is costing your AI app money
A user at nine of ten images opens six tabs and clicks generate in all of them. Every tab passes your limit check, every tab gets an image, and you pay for all six. The bug is one read-then-write - and your unit tests will never catch it.
engineering · 9 minHow to build a credits system for your AI app (ledger design, rollover, refunds)
A user emails: "I had 40 credits this morning and now I have 12, and I only made one image." If your balance is a column you mutated, you cannot answer that email. Here is the ledger design that can.
thinking · 7 minStripe metered billing for AI apps: what it solves and what it does not
You are sketching the pricing page for your AI app and every plan ends in "per generation" - because your costs arrive per generation. Stripe meters the charging half beautifully. The question is what happens at request time.
thinking · 8 minHelicone is in maintenance mode. An honest map of where to go
Somewhere in your codebase a base URL points at Helicone, and it has been quietly doing four jobs at once. The team got acquired - good for them - but now you have to replace each job separately, and the one everyone forgets is the one your users will exploit.
engineering · 8 minHow to stop free-tier abuse without killing signups
The usage graph spikes at 3:41am: four thousand free generations in an hour, all from disposable emails. Your first instinct is a credit-card wall. That instinct will cost you more than the abuse does.
thinking · 7 minTokens, credits, or requests: choosing the unit you meter (and price)
The pricing doc has three columns: $9, $19, $49. The prices took twenty minutes. The row above them - what a user actually gets for the money - has been blank for a week. That blank row is the real decision.
engineering · 3 minThe trial-ending email everyone sends is the same email. Here's the one that converts
"Your trial ends in 3 days! Upgrade now to keep access." You've received a hundred of these. You've deleted a hundred of these. The email fails because it's about your product, not about the user's trial.
engineering · 3 minStop making users do math on your pricing page: recommend their plan from their own usage
Every pricing page asks the user to solve an estimation problem: "How many credits will I need per month?" Nobody knows. But for any user who has actually used your product, their usage history IS the answer - here is how to put it on the pricing page.
engineering · 3 minWin-back emails fail because they're written for "users." Write them for the one user instead.
Every dormant-user campaign in history: "We miss you! Here's what's new." Open rate: pity clicks. The email fails because it's about your changelog - and the user left because of something in their experience.
engineering · 3 minSpotify Wrapped is a growth loop, not a year-end gimmick. Ship one for your AI app in an afternoon.
Spotify Wrapped works because people love seeing their own behavior reflected back as a story. Every AI app with usage data can run that loop monthly - and almost none do, because turning usage rows into narrative used to be a content problem. It is now a schema problem.
engineering · 3 min"AI-personalized copy converts better" - prove it or delete it. Here is the 40-line A/B harness
Half of the "we added AI personalization and conversions went up 40%" posts have no control group. The other half measured clicks, not revenue. If LLM-generated copy is going in front of your paywall, you owe yourself a real experiment - and the harness is tiny.
thinking · 3 minAI personalization without the creepy part: opt-out as a first-class return value
Users have learned that "personalized for you" means "we mined everything you ever did" - and the backlash is rational. When I added LLM-generated personalized copy to my app, the part I sweated was not the generation. It was making declining it a real, respected choice.
engineering · 3 minI stopped walking into demo calls blind: every lead now comes with a usage brief written 10 seconds before the call
Founder-led sales has one structural weakness: you have no time to prep. If the lead has touched your product, their usage history is the best discovery call you'll never have to run - here's how I turn it into a one-page brief, automatically, before every call.
thinking · 4 minThe "founder email" converts like crazy and scales like garbage. Here is the middle path.
A personal email from the founder converts trials at a rate no automated sequence touches - and at 50 signups a week it stops scaling. The middle path: drafts generated from each user's real usage, that you read, edit, and send yourself.
engineering · 3 minChurn doesn't announce itself. My Monday Slack digest does it instead.
Every founder finds out about churn the same way: the cancellation email. By then the user has been gone for weeks - the decision happened earlier, quietly, in their usage. So I made the metering tables write me a memo.
engineering · 3 minHalf of every support ticket is asking what the user already did. Attach the answer instead.
The ticket says "it's not working" - and the next twenty minutes go to figuring out who this user is, what plan they're on, and whether "it" is a bug, a quota, or a misunderstanding. The actual fix usually takes two. All of that context lives in your usage data; here is how to attach it to every ticket automatically.
thinking · 4 minYour users are telling you your roadmap, in writing, every day. It's in your prompt logs
Founders pay for interviews and beg for survey responses to learn what people are actually trying to do. Meanwhile, your users type their intent into your product, in their own words, hundreds of times a day - and nobody performs for a prompt box.
engineering · 5 minHow to reset usage limits when a subscription renews
A weekly plan, used twice. First week: ten generations. Second week: zero, because the counter never reset. This is the cron-job mistake - and the fix is one field on one call.
engineering · 6 minHow to manage subscription renewals: aligning Vevee with Stripe
A user signs up on Jan 15. Stripe charges them on the 15th of every month. Your metering layer resets on the 1st. Two clocks. One angry support ticket per cycle.
engineering · 5 minStop hardcoding your pricing page - render it from your metering layer
Every B2B SaaS I have shipped repeats the same mistake: plans live in two places - the dashboard that enforces them, and a const PLANS = [...] on the marketing site. They drift within a quarter.
thinking · 4 minMeter AI by user, not by account - your margin depends on it
A few users will cost you 100x what your median user costs. If you only meter at the account level, you will not see them coming until your gross margin is gone.
engineering · 5 minreserve / commit / release: the only correct way to enforce AI quotas
Every team I have seen build per-user AI metering has shipped a version of canUse → call OpenAI → track. It looks correct in single-threaded tests. It is broken in production.
thinking · 4 minWhy Stripe Billing is not enough for AI products
Stripe is excellent at one thing: turning usage into invoices. AI products need three other things, and Stripe does not do any of them.
engineering · 6 minDynamic onboarding: a different first step for every user
A teacher and a student sign up the same minute. The teacher wants to build a quiz; the student wants to summarize a lecture. Your onboarding shows them both the same five-step checklist. One of them bounces.
thinking · 6 minPaywall copy that rewrites itself for every user
Your paywall says "Upgrade to Pro for unlimited generations." A teacher reads it and shrugs. A student on a budget reads it and closes the tab. The same words, two lost conversions - because the words were written for nobody in particular.
engineering · 5 minAdd usage limits to your AI app in 10 minutes (no backend required)
You shipped an AI feature on Friday. By Monday one user had burned $212 of OpenAI credit on your free tier. The fix is not a TODO comment that says "add rate limiting" - it is two method calls.
engineering · 5 minMeter LLM tokens, not requests - your flat per-request limit is lying
Two users, both at 100 requests. One sent tweets, the other sent novels. Your cost for them differed by 400x. Your limit treated them identically - and your margins noticed.
engineering · 7 minThe upgrade nudge that writes itself: convert free users before they hit the wall
By the time a user hits your paywall, they are blocked, annoyed, and halfway to a competitor’s signup page. The best moment to make the pitch was three days earlier - when they were winning. Here is how to catch it, automatically, for every user at once.
engineering · 5 minOne event, two limits: gate your premium model without forking your code
The premium model launch was going great until you looked at the bill: free users had figured out the good model and were living on it. You need a sub-limit. You do not need a second code path.
engineering · 5 minTest mode: break your pricing in the sandbox, not on your customers
You changed the free tier from 10 to 25 generations and somehow locked out every Pro user for an hour. Nobody tested it, because testing it meant tracking fake events into production analytics. There is a mode for this.
engineering · 5 minThe support ticket that solves itself: log the prompt behind every AI event
A user says your AI feature "broke" on Tuesday. You have a charge for the call, a timestamp, and no idea what they asked or what the model said. The evidence existed for exactly one request - the one you didn’t log.
engineering · 5 minYour funnel has one broken step. Find it without writing a single SQL query.
A hundred people saw your paywall this week. Three upgraded. Is that a copy problem, a price problem, or did ninety of them never generate anything worth paying for? You cannot fix what you cannot locate.
engineering · 5 minOne user, three ghosts: fix your funnel with identify()
Your funnel says signup conversion is 4%. It is actually 11%. The missing users didn’t bounce - they came back on another tab and got counted as someone new. Every number downstream of that split is wrong.
thinking · 5 minThe usage bar that sells the upgrade (build it with a public key in an afternoon)
An invisible limit feels like a trap. A visible one feels like a fuel gauge. Same quota, same plan, same user - and a measurably different reaction when the wall finally arrives.
engineering · 6 minHow to cancel a subscription without burning the bridge (or your data)
The user cancels. Do they drop to a free tier, or lose access when the paid month runs out? Those are different products, different SDK calls, and different mistakes when you get them wrong.