Privacy Policy

Hookbase is a developer webhook ingestion, monitoring, inspection, and debugging platform owned and operated by AfriSYS Group Ltd, incorporated in the United Kingdom.

• Account data — name, email address, hashed password, and OAuth provider identifiers upon registration.
• Webhook request data — HTTP method, path, headers, payload body, source IP, and response metadata for requests received at your endpoints.
• Usage metrics — request counts, replay logs, and quota counters used for plan enforcement and platform operations.
• Audit logs — records of sensitive account and workspace actions (logins, member changes, configuration updates).
• Payment data — billing is processed through Stripe. We store only customer IDs and subscription status; raw card numbers are never stored on our servers.
• API credentials — cryptographically salted identifiers generated when creating API keys. Raw tokens are displayed only once.

• Operating, buffering, and routing webhook events through the Hookbase platform.
• Enforcing plan limits, quota tiers, and processing subscriptions.
• Delivering transactional notifications (password resets, team invitations, critical anomaly alerts).
• Detecting abuse, infrastructure DoS storms, and security anomalies.
• Complying with statutory and regulatory obligations under UK and EU law.

We do not sell, rent, monetize, or share your data with third parties for marketing purposes.

Request payloads are automatically purged in accordance with your workspace plan tier (7 days on Developer, 30 days on Team, 365 days on Enterprise). Pinned items are retained until unpinned. Account closure initiates hard deletion within 30 days.

For privacy requests or Data Processing Agreements (DPA), contact [email protected].