HookFeed Privacy Policy

Introduction

HookFeed, LLC provides an online webhook visibility platform that receives event data from third-party applications and workflow automation tools and transforms it into dashboards, alerts, digests, and other actionable outputs for non-technical users. All of our customers are individuals, business entities, or other organizations that use our service to gain visibility into what's happening across their apps and workflows.

HookFeed's main office is in San Diego, California. We offer our services to customers worldwide.

This Privacy Policy describes our policies for personal data that we collect and use to manage our business, such as data about visitors to our website and our customers' personnel.

Important Note About Webhook Data: This Privacy Policy does not govern personal data that may be contained within the webhook payloads and event data that our customers transmit to HookFeed through their configured data sources ("Inbound Data"). Our customers control what data they send to HookFeed and are responsible for ensuring that they have the right to transmit such data and for describing their own privacy practices in their published privacy policies. We process Inbound Data only as permitted by our customers in our agreements with them.

We have included information below to describe our commitments to you if we have access to your data in our role as a data processor for our customers, but you should review the privacy policy of our customer that controls your personal data to understand its privacy practices.

How to Contact Us

Email: help@hookfeed.com

Mail: 8605 Santa Monica Blvd #74803, West Hollywood, CA 90069

Please contact us if you have any questions about the information in this Privacy Policy or our handling of your personal data, or would like to access, correct, delete, restrict our use, or take other action with regard to your personal data. We ask, however, that if we are in possession of your data solely as a service provider for our customer, you first contact our customer with your request.

Changes to Privacy Policy

We may change this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice prior to the changes taking effect. We will manage your personal data in accordance with the Privacy Policy version that was published on the date that we collected the data about you.

Definitions

The types of data we collect and our purpose for collecting it depend on how you interact with us. We have used defined terms for the different types of relationships to help us explain our privacy practices:

  • customer means our application services customer; this is the individual, business, or other organization that establishes an account with HookFeed for the use of our services;
  • account user means an individual who interacts with us as a representative of our customer or as a customer themselves; this includes service users, billing contacts, team members, and technical support contacts;
  • data subject means an individual whose personal data may be contained within Inbound Data transmitted to HookFeed by a customer; for example, a customer's end user whose email address appears in a webhook payload from Stripe or Kit;
  • visitor means an individual who visits our website, our social media pages, interacts with us at a trade show or other industry event, or communicates with us in some other way other than as an account user or data subject;

These words also have certain meanings in this Privacy Policy:

  • services means HookFeed's webhook visibility platform and related analytics, alerting, and notification services;
  • site or website refers to hookfeed.com and any other website where this Privacy Policy is posted;
  • Inbound Data means webhook payloads and other event data transmitted to HookFeed by customers or by third-party services at a customer's direction;
  • we, our, and us refer to HookFeed;
  • you and your refer to visitors, account users, or data subjects, or all of them, as indicated by the context.

Data Collection Purposes

We collect personal data for our business purposes:

  • to operate our website;
  • to improve our website and service offerings;
  • to market our services;
  • to manage our relationship with our customers, including account administration;
  • to provide our online services to our customers;
  • to provide customer support;
  • to manage our vendors; and
  • to detect and prevent fraud, abuse, and security incidents.

The Section below captioned "How We Use Data" explains how we use different categories of data for each of these purposes.

Data Collection Methods

Automated data collection on our website and online services platform

When you visit our site or use the HookFeed services, our servers capture data that may be used to identify you and your device, such as your IP address, device identifier, and information about your device such as the operating system, time zone setting, language setting, browser settings, and browser plug-ins. Depending on your device settings, we may also capture location information. Our servers may also capture information about your visit to our site or services platform, such as the website you visited right before you visited our site, the time and duration of your visit on each page on the site, and your navigation path from page to page.

We and our third-party analytics providers may use an online tracker (such as a cookie we place on your browser) so that we may identify you as a return visitor if you visit our site more than once. Please see "How to Opt Out of Online Data Collection" below for information on how to block cookies.

Anonymous sessions

HookFeed may provide anonymous, session-based access to certain features of the Services (such as generating a webhook URL and viewing incoming events) before you create an account. During an anonymous session, we collect technical data such as your IP address and session identifiers stored temporarily in our systems. If you subsequently create an account, the data from your anonymous session may be associated with your account.

Data provided by you as part of your communications with us

We collect personal data that you submit to us as part of a communication with us as a visitor or account user, such as via email, submission of a web form, telephone, or in person (such as at a meeting, trade show, or other event). For example, you may communicate with us as a visitor to obtain more information about our services, or as an account user to request technical support. The communication may include information that can be used to identify you such as your name, job title, job function, the organization you represent, email address, and phone number, as well as information about your interest in our company or our services. We do not solicit information from you beyond what is useful to us for the purposes described above, but if you choose to volunteer additional personal information, we will collect that as part of the communication.

Data provided by you to establish and maintain your HookFeed account

Customers are required to provide account information to create and administer their HookFeed account. We collect the name and contact information of account holders. For magic link authentication, we collect email addresses. If you use a payment card or other financial account to make payment arrangements, our third-party payment processor collects and processes payment information; we do not collect or store your full credit card number, expiration date, or PIN. The transaction details we retain are those that allow us to verify your payment, including price, currency, date of payment, payment method, and account name.

Marketing partners and resellers

We have relationships with other companies that help us market, sell, and deliver our services. They may collect personal data of the type described above using the methods described above and provide that data to us. We will treat personal information we receive from our marketing partners and resellers the same as the personal information we collect directly.

Integration partnerships

We partner with third-party application providers and workflow automation platforms (such as Zapier, Make, and N8n) to make HookFeed available in their directories and marketplaces. Through these partnerships, we may receive basic account and usage information necessary to facilitate the integration.

How We Use Data

This section describes more specifically how our use of the data relates to the purposes for which we collected the data.

Visitors

We use data collected about visitors:

  • To operate our website — web servers, by their nature, must capture your IP address and information about your browser and device to display our site to you;
  • To develop our website and product offerings — we use information about visitor navigation on our site to help us understand what parts of our website and product offerings are of interest to different kinds of visitors so that we can modify and improve our site content and marketing materials;
  • To show you personalized content when you visit our site — we use information about your prior visits to customize subsequent visits; for example, we may surface content about integrations or use cases that appear relevant to you;
  • To measure the success of our marketing efforts — we use visitor information to verify whether marketing activities are resulting in visits to our site or other interactions;
  • To communicate with you as part of our marketing efforts — if you provide us with contact information, we may use it to send you communications about our company, our products or services, or related topics that we think you may find of interest.

Account users

We use data collected about account users (alone or combined with data collected as part of an account user's visitor activity):

  • To provide our online services — we use authentication credentials (magic links or other methods) to authenticate individuals as authorized users; we use IP addresses and other technical data to provide and secure our services;
  • To manage accounts — we use contact information such as your email address to send invoices, account communications, and authenticate individuals who request information or support;
  • To review compliance — we may use personal data to monitor compliance with usage terms in our services agreements and enforce terms and conditions; for example, if the customer's use of our services is limited to a certain event volume, we may use data to monitor compliance with usage restrictions;
  • To develop our service offerings — we use information about your use of our services to measure interest in various features, plan enhancements, and improve user experience;
  • To communicate with you — we use contact information and information about your use of our services to send you communications about our products or services or related topics that we think you may find of interest.

Inbound Data (Customer-Controlled Data)

What is Inbound Data?

Inbound Data consists of webhook payloads and other event data that our customers transmit to HookFeed through their configured data sources. This data originates from third-party applications and services (such as Stripe, Kit, SavvyCal, Zapier, or N8n) and may contain personal data about our customers' own customers, users, or contacts ("data subjects").

How we process Inbound Data

We process Inbound Data solely as directed by our customers and as permitted by our agreements with them. Our processing includes:

  • Ingestion and storage — receiving webhook payloads at customer-configured URLs and storing event data in accordance with the customer's plan retention period;
  • Analysis and display — processing event data to generate feeds, dashboards, metrics, charts, timelines, and other views as configured by the customer;
  • AI-powered analysis — with the customer's use of AI features, sending portions of Inbound Data to third-party AI service providers (such as Anthropic) to analyze event structure, suggest dashboard configurations, and generate insights. These AI providers process data under their own data processing agreements and are contractually prohibited from using customer data for their own model training;
  • Alerts and notifications — delivering event-based notifications to email addresses, Slack channels, or other destinations as configured by the customer;
  • Digests — generating summary reports and delivering them on schedules configured by the customer;
  • Transformations — applying customer-configured filtering and transformations to event data.

Customer responsibility for Inbound Data

Our customers control what data they send to HookFeed. Customers are responsible for:

  • ensuring they have the right to transmit Inbound Data to HookFeed;
  • configuring data source filtering and transformations to prevent sensitive or regulated data from being stored in HookFeed;
  • complying with their own privacy policies and applicable laws regarding data they transmit;
  • informing their own users and customers about the use of HookFeed as a data processor, where required by applicable law.

If your data is in HookFeed as a data subject

If you believe that your personal data has been transmitted to HookFeed by one of our customers and you wish to access, correct, delete, or restrict its processing, please first contact the customer (the business or organization) that sent the data. They control the data and are responsible for responding to your request. If you are unable to identify or reach the customer, you may contact us at help@hookfeed.com, and we will use reasonable efforts to help you identify the relevant customer.

Data Integrity

We process personal information only for the purposes for which it was collected and in accordance with this Privacy Policy. We regularly review our data collection, storage, and processing practices to ensure that we only collect, store, and process the minimum personal information needed for the purpose collected. We take reasonable steps to ensure that the personal information that we process is accurate, complete, and current, but we depend on our account users to update their personal data as necessary.

Choices and Means to Limit Use and Disclosure of Your Data

You may limit our use and disclosure of your personal data. Please send us a request at help@hookfeed.com if you would like to know what personal data we have about you and how we use and disclose that data. You may also submit requests to help@hookfeed.com if you want to correct, delete, or restrict the use of your personal data, or if you object to our processing of your data on the grounds that we do not have a lawful basis for that processing.

On receipt of your notice that the data we have about you is inaccurate or incomplete, we will promptly correct any inaccurate data and ensure it is complete in light of the purposes for which we process the data.

If you wish to revoke any consent you have previously given, we will honor the revocation and will no longer rely on that consent to process your personal data. For example, if you no longer consent to our use of your data for marketing purposes, we will stop using the data for that purpose and notify any third party with whom we have shared that data that they must also stop using it for that purpose.

On your request, we will promptly restrict processing of your personal data or delete your personal data except to the extent the restriction or deletion will prevent us from complying with our legal obligations or interfere with our reasonable record keeping as necessary to demonstrate compliance with our contracts and applicable law.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by following the instructions in this section.

Additional Information for California Residents

In addition to our commitments stated above, if our collection of personal information about you for our own general business purposes is covered by the California Consumer Privacy Act (CCPA), you have certain rights under that law.

You may request disclosure of the following specific information:

  • the categories of personal information as well as the specific pieces of personal information that we have collected about you for our business purposes over the prior 12 months;
  • the categories of sources from which we have collected that personal information;
  • our purpose(s) for collecting that personal information;
  • the categories of third parties with whom we have shared the personal information; and
  • whether we have sold the personal information to third parties or disclosed the information to third parties for a business purpose, and if so, the categories of personal information and third parties.

In addition, you have the right to ask HookFeed to delete your personal information. We will comply with your deletion request and require our service providers to do the same, unless we plan to retain the personal information on a legally permitted basis and we give you notice of this fact and the legal basis on which we rely.

You may make a request by sending an email or physical mail request to the addresses above.

Before responding to your request, we may ask you to provide information needed to verify that you are the consumer (or have authorization from the consumer) whose personal information is covered by the request.

We may not discriminate against you because you make a request described in this Section by denying you our services or providing a different quality or price for our services, unless the different service or price is reasonably related to the value provided to you by your data.

If you are under 16 years of age, you are not authorized to use our website or our services and we do not want your personal data.

Disclosure

We have not sold or leased personal data, and will not sell or lease your personal data.

We will not disclose your personal data to third parties except as follows:

Legal Reasons

When we believe release is appropriate to comply with the law, to enforce our terms of use and other rights, or to protect the rights and safety of others. This may include exchanging information with government regulatory or law enforcement agencies, or with other companies and organizations for fraud protection and legal compliance.

Protecting Network and Information Security

As necessary to protect our information and systems from unauthorized actions that compromise their security or availability, such as disclosures as part of industry initiatives to identify and block malicious actors.

Sale of Business

As part of a sale of business assets where the purchaser needs the personal data to use the assets. We may in the future sell all or part of our assets or be involved in a merger. We may provide the company that is seeking to acquire our business with access to personal data as part of their evaluation of our business, but will require them to maintain the personal data in confidence and use it only to evaluate our business. If we complete a transaction, it is customary to transfer personal data that is related to the purchased business assets to the purchaser.

Service Providers

We use the services of companies to collect data on our behalf or to help us analyze, store, manage, and otherwise process your personal data. Each of these companies commits in its contract with us to use the personal data only according to our contract with them or our other instructions as necessary to support our business. They are not authorized to use your personal data for any other purpose. They are not authorized to disclose your personal data to others except with our permission, and only if they require the others to comply with the same restrictions that apply to them.

Our current service providers include:

Provider Purpose
Amazon Web Services, Inc. Cloud infrastructure and data storage
Anthropic PBC AI-powered event analysis and dashboard auto-configuration
Cloudflare, Inc. CDN, DDoS protection, network security
Help Scout, Inc. Customer support and help desk
Heroku (Salesforce, Inc.) Application hosting platform
Hex Technologies, Inc. Data collaboration and analytics
PostHog, Inc. Product analytics and session replay
Postmark (ActiveCampaign, LLC) Transactional email delivery
Sentry (Functional Software, Inc.) Error tracking and application monitoring
Stripe, Inc. Payment processing

We may update this list from time to time as our service providers change.

AI Service Providers

Certain features of our Services use third-party AI providers to analyze Inbound Data and provide intelligent features such as auto-configuration of dashboards, event analysis, and view suggestions. When AI features are used, portions of event data may be transmitted to these providers for processing. Our AI service providers are contractually required to process data only as instructed by us, to maintain appropriate security measures, and not to use customer data for training their models. Our current AI service provider is Anthropic.

Integration Partners

If you access HookFeed through an integration partner (such as through a Zapier action, Make module, or N8n node), we may share basic account and usage information with the partner as necessary to facilitate the integration and maintain the partnership.

Online Data Collection Techniques

All web servers capture certain personal information, such as IP address, in order to serve the web page visited. Website operators may also capture personal information using tracking devices such as cookies. A cookie is a unique alphanumeric identifier that is placed by a web server on the browser used to view the content or use the service at the site. Cookies are used to analyze visitors' use of the website.

A tracking pixel, also known as a web bug or web beacon, is a small graphic (usually 1 pixel × 1 pixel) invisible to the eye, that is embedded in web content or email. When content that has an embedded web beacon is viewed, the browser will request content from a web server, which in turn will set a cookie.

How to Opt Out of Online Data Collection

You can manage browser cookies through your browser settings. The "Help" feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, how to disable cookies, and when cookies will expire. If you disable all cookies on your browser, neither we nor third parties will transfer cookies to your browser. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some features and services may not work.

Communications Policy

If you do not wish to receive our email or other communications, please send your request to help@hookfeed.com or use the unsubscribe link provided in our emails. Please note that it may take up to ten days to remove your contact information from our marketing communications lists, so you may receive correspondence from us for a short time after you make your request. This opt-out does not apply to administrative messages necessary to deliver the Services, such as account notifications or service updates.

Children

Children are not permitted to use our site or services. We do not knowingly collect personal information from anyone under 16. If you are under 16, do not use or provide any information on our Sites unless you have involved your parent or guardian. If we discover that we have information about a child, we will delete that information. If you are the parent or guardian of a child and you believe we have personal data about the child without your consent, please contact us at the address appearing at the top of this page and we will delete that information.

Security

HookFeed protects personal data from unauthorized use, disclosure, corruption, and destruction using appropriate technical and organizational measures. Our security practices are described in more detail at our security page. However, no application, Internet, or email transmission is ever fully secure or error-free, and we do not guarantee the security of any personal information. You are also responsible for ensuring that your account credentials and webhook URLs are protected.

Data Retention

We will retain your personal data only for as long as reasonably necessary to fulfill the purpose for which it was collected, and to comply with our legal obligations, and will use secure means to destroy the data after that time. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

For Inbound Data, retention periods are determined by the customer's plan tier and settings (for example, 30 days for the free tier, 90 days for Starter, 1 year for Pro, and unlimited for Business). When Inbound Data retention limits are reached, event data is permanently deleted.

When a customer deletes their account, we will delete all associated Inbound Data within a reasonable period, subject to any legal retention obligations.

International Transfers

We will comply with laws applicable to the transfer of personal data across international borders. We provide appropriate contractual commitments to our customers in the European Union that require protections around transfer of personal data to the United States. For customers subject to the General Data Protection Regulation (GDPR), we will enter into appropriate data processing agreements, including Standard Contractual Clauses or other lawful transfer mechanisms as required.

Data Privacy Framework

If HookFeed certifies under the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, or the UK Extension, we will update this section with details of our certification and your rights under those frameworks.

Your Data Privacy Rights

Depending upon your location and in accordance with applicable laws, you may have the right to:

  • Access information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic information transferred to another party.
  • Request Correction of your information where it is inaccurate or incomplete.
  • Request Deletion of your information, subject to certain exceptions prescribed by law.
  • Request Restriction or Object to Processing of your information.
  • Not be Discriminated Against by us for exercising your privacy rights.

If you would like to exercise any of these rights, please contact us at help@hookfeed.com. We will process such requests in accordance with applicable laws, and in some circumstances may need to deny your request in whole or in part (for example, if we have a legal obligation to maintain your information for a certain purpose). To protect your privacy, we will take steps to verify your identity before fulfilling your request.

Depending on your location of residence, you may have the right to appeal our response to your request. In such circumstances, we will inform you of the right to appeal and the appeal process.