Privacy Policy

1. Introduction

HookWatcher ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our webhook testing service.

2. Information We Collect

2.1 Information You Provide

When you create an account, we collect:

• Email address
• Name (if provided)
• Password (stored in hashed form)
• If you enable two-factor authentication (MFA): a TOTP secret used only to verify login codes

2.2 Webhook Data

When you use HookWatcher, we store:

• Webhook request data (headers, body, query parameters)
• Response data (status codes, headers, body)
• Request metadata (timestamp, IP address, user agent)
• Webhook endpoint configurations

2.3 Automatically Collected Information

We automatically collect certain information when you use our Service:

• IP address
• Browser type and version
• Device information
• Usage patterns and preferences
• Session information

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your account
• Send you technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Your webhook data is stored securely and is only accessible to you and users you explicitly share your webhooks with. We use encryption in transit and at rest to protect your data.

5. Data Retention

We retain your information for as long as necessary to provide the Service. Webhook and request data is kept for the retention period of your workspace, up to your plan's maximum (10 to 600 days). If a paid plan is not renewed, the account is deactivated after 20 days and its data is permanently deleted 10 days later unless it is renewed; you are notified by email before each step. Payment and invoice records are retained as required for accounting and legal compliance.

When you delete your account or webhook data, we will delete or anonymize your information except where we are required to retain it for legal purposes. MFA data is cleared when you reset your password via the forgot-password flow.

5a. Payment Information

Subscription payments are processed by Razorpay. We do not store your full card or bank details; we store payment metadata (order ID, amount, currency, tier, status) and may store invoice documents. Your payment data is subject to Razorpay's privacy policy. We use your registered email to send payment confirmations and invoices.

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your consent: When you explicitly share webhooks with team members
• Service providers: With trusted third-party service providers who assist us in operating our Service
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability
• Withdraw consent

To exercise these rights, please contact us through our support channels.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to the transfer of your information to these facilities.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: