1. Information We Collect

We collect the following types of information:

Account information: Name and email address when you register.
Webhook event data: HTTP request headers, body, and metadata received at your endpoints. This data is stored temporarily (7 days free, 30 days Pro) and is never shared.
Usage data: Pages visited, features used, and basic analytics via Google Analytics 4.
Payment information: Processed securely by our payment provider. We do not store card numbers.

2. How We Use Your Information

To provide and operate the WebhookWhisper service
To send transactional emails (account verification, billing receipts)
To improve our product using aggregated, anonymized usage data
To respond to support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Webhook Data

All webhook payloads received at your endpoints are stored encrypted at rest. Data is retained for 7 days on the Free plan and 30 days on Pro. Guest endpoint data is deleted when the endpoint expires (1 hour after creation). We do not read or analyze the content of your webhook payloads except for technical troubleshooting when explicitly requested.

4. Cookies

We use session cookies to keep you logged in and analytics cookies (Google Analytics 4) to understand how the product is used. You can opt out of analytics by enabling Do Not Track in your browser or using a browser extension that blocks GA4.

5. Data Security

All data is transmitted over HTTPS. Webhook payloads are encrypted at rest. We use industry-standard security practices and regularly review our infrastructure. In the event of a data breach affecting your personal data, we will notify you within 72 hours.

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your data in a portable format

To exercise these rights, email us at [email protected].

7. Third-Party Services

We use the following third-party services:

Google Analytics 4: Usage analytics (anonymized)
Stripe / Payment Processor: Payment processing

8. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of material changes. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Contact us at [email protected].

Privacy Policy