Privacy policy
What we collect, why, where it lives, and how to exercise your rights. Written to be read, not skimmed past.
In short
- The marketing site collects nothing: no cookies, no analytics, no trackers — its server keeps ordinary access logs, briefly.
- The app collects what an account needs: email, name, a password hash (scrypt — we cannot read it), and the events you send us.
- Event payloads are processed only to deliver them, retained per your plan, then archived or deleted on schedule.
- Data lives in the EU, in Germany (Hetzner compute, Neon Postgres on AWS Frankfurt). Requests: [email protected], honoured within 30 days.
What we hold, and why
| Data | Why | Kept |
|---|---|---|
| Account: email, name, scrypt password hash | sign-in, alerts you asked for | until the account is deleted |
| Event payloads and delivery attempts | the service itself: deliver, retry, show the timeline | per plan retention (3–90 days), then archived or deleted |
| Source and destination credentials | authenticating to providers on your instruction | AES-256-GCM encrypted; deleted with the source/endpoint |
| Audit log (who did what) | operator accountability | parameter hashes only — never the parameters |
| Web server access logs (IP, path, user agent) | abuse prevention, debugging | rotated within weeks |
| Support email you send us | answering you | ordinary mailbox retention |
Legal bases (GDPR)
| Processing | Basis |
|---|---|
| Running the service you signed up for | contract (Art. 6(1)(b)) |
| Security logging and abuse prevention | legitimate interest (Art. 6(1)(f)) |
| Operational emails: delivery failures, anomaly alerts, bug digests | contract — they are the product working |
| Anything promotional | consent — and we currently send none |
Subprocessors
| Provider | Function | Location |
|---|---|---|
| Hetzner Online GmbH | compute: the production servers | Falkenstein, Germany |
| Neon, Inc. | managed Postgres: the primary datastore | on AWS eu-central-1, Frankfurt |
| Cloudflare, Inc. | DNS, TLS, WAF and DDoS protection for public hostnames | global edge |
| BrandMyInbox (our own infrastructure) | transactional email relay | Falkenstein, Germany |
| Oracle Cloud (via BrandMyInbox) | outbound email transmission (OCI Email Delivery) | Jerusalem, Israel (EU adequacy decision) |
| SUMIT | payment processing — card details never reach our servers | Israel (EU adequacy decision) |
Your payloads may contain personal data of your users. There, HookGet is the processor and you are the controller: we process on your instruction (the delivery configuration), and the retention and deletion controls above are the tools you meet your own obligations with. A signed DPA is available on request at [email protected].
Questions
Does HookGet sell or share personal data?
No. Event payloads are your data, processed to deliver them and nothing else. We run no advertising, no analytics resale, no data brokerage. The subprocessors below receive only what their function requires.
How do I get data deleted?
Deleting an endpoint, source or project cascades to its data; payloads also expire on the retention schedule of your plan automatically. For account deletion or a data-subject request (access, rectification, erasure, portability), email [email protected] — requests are honoured within 30 days and confirmed in writing.
Where is the data, legally speaking?
Inside the EU, in Germany: compute runs at Hetzner (Falkenstein) and the database is
managed Postgres at Neon, hosted on AWS eu-central-1 (Frankfurt). Transactional
email is relayed from Germany and transmitted through Oracle Cloud's Jerusalem region —
Israel holds a European Commission adequacy decision, so that transfer needs no additional
mechanism. DNS and TLS termination for the public site use Cloudflare. See the subprocessor
table for the full list.
Start delivering webhooks today
Point your webhooks at HookGet and watch the first delivery arrive, signed, in under a minute.
Create a free account Try the free webhook tester
10,000 deliveries a month free, no credit card. The free tier blocks rather than bills, so trying it cannot produce an invoice.