1. Introduction

HookSniff ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our webhook delivery service ("Service").

2. Information We Collect

2.1 Account Information

Email address
Name (optional)
Company name (optional)
Payment information (processed by Stripe, not stored by us)

2.2 Usage Data

API request logs (endpoint URLs, timestamps, response codes)
Webhook delivery logs (payloads, delivery attempts, status)
Dashboard activity (page views, feature usage)
IP addresses (for security and rate limiting)

2.3 Technical Data

Browser type and version
Operating system
Device information
Cookies and session tokens

3. How We Use Your Information

We use your information to:

Provide and maintain the Service
Process webhook deliveries and retries
Authenticate and authorize API requests
Send service-related notifications (delivery failures, billing alerts)
Improve the Service and fix bugs
Prevent fraud and abuse
Comply with legal obligations

4. Webhook Payloads

We process webhook payloads solely for delivery to your configured endpoints
Payloads are stored temporarily for delivery, retry, and logging purposes
Payloads are automatically deleted according to your plan's retention period
We do not inspect, analyze, mine, or sell your webhook data
We do not use your webhook data for advertising or profiling

5. Data Sharing

We do NOT sell your personal data. We may share information with:

Polar.sh: Payment processing (subject to Polar.sh's Privacy Policy)
iyzico: Payment processing for Turkish customers (subject to iyzico's Privacy Policy)
Infrastructure providers: Cloud hosting for Service operation
Legal authorities: When required by law, court order, or to protect our rights
Business transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement industry-standard security measures:

All data transmitted over TLS/HTTPS
API keys are hashed before storage (SHA-256)
HMAC-SHA256 signatures for webhook verification
Regular security audits and updates
Access controls and authentication for all systems

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

Data Type	Retention Period
Account data	Until account deletion
Webhook delivery logs	7-365 days (plan dependent)
API request logs	30 days
Payment records	As required by law
Analytics data	90 days

After the retention period, data is automatically and permanently deleted.

8. Your Rights

You have the right to:

Access: Request a copy of your personal data
Correct: Request correction of inaccurate data
Delete: Request deletion of your personal data
Export: Request your data in a portable format
Object: Object to processing of your personal data
Withdraw consent: Where processing is based on consent

To exercise these rights, contact us via the contact form

9. Cookies

We use essential cookies for authentication and session management. You can control cookies through your browser settings.

10. International Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.

11. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or dashboard notification.

13. Contact Us

For privacy-related inquiries, contact us via the contact form