Privacy Policy

1. Introduction

Hooki ("we," "our," or "us") operates the hooki.io website and service. This Privacy Policy explains how we collect, use, and protect your information when you use our webhook debugging platform.

2. Information We Collect

We collect information you provide directly and information generated through your use of the service:

• Account Information: When you sign in via GitHub OAuth, we receive your GitHub username, email address, and profile avatar.
• Webhook Data: HTTP requests sent to your Hooki endpoints are captured and stored for debugging purposes. This may include headers, body content, query parameters, and IP addresses of the sender.
• Usage Data: We may collect basic usage metrics to improve the service.
• Payment Information: Payments are processed through PayPal. We do not store credit card numbers or payment credentials on our servers.

3. How We Use Your Information

• To provide and maintain the Hooki service
• To authenticate your identity via GitHub OAuth
• To store and display your captured webhook requests
• To process payments and manage subscriptions
• To improve our service and develop new features
• To communicate with you about service updates

4. Legal Basis for Processing

We process your data based on: (a) your consent when you create an account; (b) performance of our contract to provide the service; and (c) our legitimate interest in improving the platform and ensuring security.

5. Data Security

All data is encrypted in transit using TLS and at rest. Your webhook endpoints are protected by unique, unguessable UUIDs. We implement industry-standard security measures to protect your information from unauthorized access, alteration, or destruction.

6. Data Retention

We retain your data only as long as necessary to provide the Service:

• Free Plan: Webhook request data is retained for 7 days, then automatically deleted.
• Lifetime Plan: Webhook request data is retained for 365 days from the date of capture.
• Account Data: Your account information (email, username) is retained until you delete your account.

Manual Deletion

You may delete any inbox and its associated data at any time from your dashboard. Deletion is immediate and irreversible.

Account Deletion

You may request full account deletion by contacting [email protected]. Upon account deletion:

• All your inboxes and captured webhook data will be permanently deleted within 30 days
• Your GitHub OAuth connection will be revoked
• Your subscription (if any) will be cancelled

Data Export

You may export your webhook data at any time from the dashboard. Exported data includes request headers, body, query parameters, and timestamps in JSON format. To request a full data export of your account, contact [email protected].

7. Data Sharing

We do not sell, trade, or share your personal information or webhook data with third parties. Your data is only accessible to you and, if applicable, members of teams you have created or joined.

8. Cookies

We use essential cookies to maintain your session and preferences. These cookies are necessary for the service to function. We do not use tracking cookies or share cookie data with third parties.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your webhook data in a portable format
• Opt out of non-essential data collection

10. International Data Transfers

Your data may be processed in countries outside your own. By using Hooki, you consent to the transfer of your information to these locations, which may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].