Privacy Policy
Last updated: September 1, 2026
This policy explains what information HookFlow, Inc. (“HookFlow”, “we”) collects when you use our website and webhook platform, how we use it, and the choices you have.
1. Information we collect
We collect the account details you provide (name, email address, company), billing information processed by our payment provider, and the webhook payloads and metadata that pass through your endpoints. We also collect standard server logs such as IP addresses, user agents and request timestamps to operate and secure the service.
2. How we use information
Webhook payloads are processed solely to deliver them to the destinations you configure, to show them to you in the dashboard and to retry failed deliveries. We use account information to provide support, send service notices and bill you. We do not sell personal data and we do not use payload contents to train models or for advertising.
3. Retention
Payloads are retained for the event-history period of your plan (3, 30 or up to 365 days) and then permanently deleted from primary storage within 24 hours and from backups within 30 days. Account data is kept for as long as your account is active and for up to 90 days after closure, unless a longer period is required by law.
4. Sub-processors and transfers
We use a small number of infrastructure, email and payment sub-processors, each bound by data processing agreements. Payloads stay in your workspace's home region. Where personal data is transferred outside the EEA we rely on Standard Contractual Clauses.
5. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact privacy@hookflow.dev and we will respond within 30 days.