Privacy Policy

Last updated: March 23, 2026

1. Introduction

[COMPANY_NAME] operates HookNotify (the “Service”), a web application that receives webhook events and sends email notifications based on user-defined rules.

We do not sell or share personal information with third parties, except as described in this policy.

2. Definitions

• Service: The HookNotify web application
• Operator: [COMPANY_NAME]
• Personal Data: Information relating to an identified or identifiable individual
• Usage Data: Data automatically collected during Service use
• You: The individual or entity accessing the Service

3. Information Collection and Use

3.1 Account Data

When you create an account, we collect:

• Email address
• Password (stored as a secure hash by our authentication provider)

3.2 Webhook Data

When your configured endpoints receive webhooks, we store:

• The webhook payload (request body)
• Request headers
• IP address of the sender
• Signature verification status
• Processing metadata (rules matched, notification status, timing)

This data is stored to provide you with webhook logs and to process notification rules. Webhook data is retained according to your plan’s log retention period.

3.3 Usage Data

We may automatically collect:

• Browser type and version
• Pages visited within the Service
• Time and date of visits
• Unique device identifiers

4. Use of Data

[COMPANY_NAME] uses collected data to:

• Provide and maintain the Service
• Process webhook events and send email notifications
• Verify webhook signatures
• Notify you about changes to the Service
• Provide customer support
• Monitor Service usage and detect technical issues

5. Third-Party Service Providers

We use the following third-party services:

• Supabase: Authentication and database hosting. Data is stored on Supabase infrastructure.
• Resend: Email delivery for webhook notifications. Recipient email addresses and email content are processed by Resend to deliver notifications.
• Vercel: Application hosting and deployment.

These providers have access to Personal Data only as necessary to perform their functions and are obligated not to disclose or use it for other purposes.

6. Data Retention

Personal Data is retained as long as your account is active or as needed to provide the Service. Webhook log data is retained according to your plan’s retention period. You may request deletion of your account and associated data at any time by contacting us.

7. Data Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and webhook signature verification. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Disclosure of Data

We may disclose Personal Data if required to:

• Comply with a legal obligation
• Protect and defend the rights or property of [COMPANY_NAME]
• Prevent or investigate potential wrongdoing
• Protect the safety of users or the public

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at the address below.

10. Children’s Privacy

The Service is not directed at anyone under the age of 18. We do not knowingly collect personally identifiable information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: [CONTACT_EMAIL]