Terms of Service

You must be at least 16 years old and able to form a legally binding contract to use Hookbase. By agreeing to these Terms you represent that you meet this requirement.

You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. Notify us immediately at [email protected] if you suspect unauthorised access.

You may not share credentials or allow others to access your account except via the workspace member-invite feature provided in the Service.

You agree not to:

• Use the Service to receive, store, or forward data that is illegal, abusive, or violates any third party's rights.
• Attempt to reverse-engineer, decompile, or extract source code from the Service.
• Probe, scan, or test the vulnerability of our systems without prior written permission.
• Use automated means to create accounts or circumvent rate limits or quotas.
• Resell, sublicense, or redistribute access to the Service without our written consent.
• Send or store personal health data (HIPAA), payment card data (PCI-DSS), or government-issued identification numbers through the Service unless you have entered into a separate data processing agreement with us.

Hookbase stores the full HTTP payload of every request received at your endpoints. You are solely responsible for ensuring that the data routed through your endpoints complies with applicable laws and that you have the necessary rights and consents to send it to us.

We recommend using endpoint-level secrets and HTTPS to protect your webhook payloads in transit. We do not inspect payload content for compliance; enforcement is your responsibility.

The Service allows you to configure routing rules and replay targets that re-send webhook payloads to external URLs you specify. You are solely responsible for the legality and security of those destinations. Hookbase is not liable for any data transmitted to external URLs you configure, including any data breaches or privacy violations that occur at those destinations.

The Service allows you to generate share tokens that create publicly accessible, unauthenticated links to individual webhook requests. You are responsible for ensuring that any data made accessible via a share token complies with applicable laws and that you have the right to share it. Revoke share tokens promptly when they are no longer needed.

API keys are credentials that grant programmatic access to the Service. You are responsible for keeping API keys confidential and must treat them with the same care as passwords. Do not embed API keys in public repositories or client-side code. Report any compromised keys to [email protected] immediately and revoke them via the dashboard.

Enterprise workspaces may configure SAML SSO with a third-party identity provider. You are responsible for the security and configuration of your identity provider. Hookbase is not liable for access granted as a result of misconfigured SSO policies.

• Paid plans are billed monthly or annually in advance via Stripe. All fees are non-refundable except where required by law.
• You may cancel at any time from the billing settings page. Your plan will remain active until the end of the current billing period, after which it will downgrade to the free Developer tier.
• We reserve the right to change pricing with at least 30 days' notice by email. Continued use after the change constitutes acceptance.
• Exceeding your plan's request quota will result in requests being dropped. We are not liable for dropped requests caused by quota exhaustion.

Request data is automatically purged after the retention period for your plan (7 days on Developer, 30 days on Pro, 365 days on Enterprise). Pinned requests are retained until manually unpinned. You may delete your account at any time; all associated data is permanently removed within 30 days of account deletion.

We aim to provide a reliable service but do not guarantee 100% uptime. The Service is provided "as is" and "as available". We may perform maintenance with or without advance notice and will not be liable for any downtime or data loss.

Hookbase and all related marks, logos, and software are our exclusive intellectual property. These Terms do not grant you any licence to use our branding or software outside of normal use of the Service.

You retain all rights to your data (webhook payloads, configurations, etc.). By using the Service you grant us a limited licence to store, process, and transmit your data solely as necessary to provide the Service.

To the fullest extent permitted by law, Hookbase is provided "as is" without warranty of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be error-free, uninterrupted, or that any defects will be corrected.

To the maximum extent permitted by applicable law, in no event will Hookbase or its operators be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, loss of revenue, or business interruption, arising out of or in connection with your use of the Service, even if we have been advised of the possibility of such damages.

Our total aggregate liability to you for any claim arising out of these Terms or the Service shall not exceed the greater of (a) the fees you paid to us in the 3 months immediately preceding the event giving rise to the claim, or (b) £50.

You agree to indemnify, defend, and hold harmless Hookbase and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in any way connected with your access to or use of the Service, your violation of these Terms, or your infringement of any third-party right.

We may suspend or terminate your account at any time for violation of these Terms, non-payment, or abuse. You may delete your account at any time. Upon termination, your right to access the Service ceases immediately and we will delete your data in accordance with our data retention policy.

These Terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

We may modify these Terms at any time. Material changes will be communicated via email or in-app notice at least 14 days before taking effect. Your continued use of the Service after a change constitutes acceptance of the updated Terms.

Questions about these Terms? Contact us at [email protected].