Privacy Policy

AnyHook is a webhook relay service. Our registered contact for privacy matters is hello@anyhook.net. If you are located in the European Economic Area, AnyHook is your data controller.

• To authenticate your account and manage your subscription.
• To receive, queue, deliver, and log webhook events on your behalf.
• To send transactional emails (delivery alerts, payment receipts, account notices).
• To monitor service health, debug errors, and improve reliability.
• To learn which websites and campaigns bring visitors to AnyHook, and which of those visitors go on to sign up, set up an app, receive their first webhook, or subscribe.
• To bill you correctly for usage under your plan.
• To respond to your support requests.

We do not use your webhook payload data to train machine learning models, build advertising profiles, or share with any party other than those necessary to deliver the service.

We engage the following sub-processors to operate AnyHook. Each processes only the data necessary for their function.

• Webhook events (payloads, headers, logs): on Free, deleted 3 days after we receive them. On Pro and Scale, replayable for 30 or 90 days, then kept as a read-only encrypted archive (Cloudflare R2) until 1 or 7 years after receipt, then deleted. You can download or delete archived events from the dashboard at any time. Past those periods we keep no copy of the content.
• Account data: retained while your account is active. Deleted within 30 days of a verified account deletion request.
• Billing records: retained for 7 years to comply with financial regulations, even after account deletion.
• Non-content metadata: retained indefinitely. This is a record of what happened, never of what was sent: the time an app first received traffic and first delivered successfully, counts of events by outcome, and the shape of a delivery failure (the status a destination returned, the kind of host it was, whether it later recovered). It carries no payload, no headers, no signing secret, and not the destination URL either, which is stored only as a one-way hash so repeat failures against the same endpoint can be grouped. We keep it to know whether the service works and whether the explanations it gives people actually help them.
• Anonymised and aggregated metrics: may be retained indefinitely for service improvement.

All data is encrypted in transit using TLS 1.2+. Webhook payload data is encrypted at rest in our database. Signature secrets (used to verify sender authenticity) are stored encrypted and are never exposed in logs or API responses. We conduct periodic security reviews and apply patches promptly.

In the event of a data breach that affects your personal data, we will notify you and, where required, the relevant supervisory authority within 72 hours of becoming aware of the breach.

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your account and associated personal data.
• Portability: receive your data in a machine-readable format.
• Restriction / Objection: limit or object to certain processing.
• Opt-out of sale (CCPA): we do not sell personal data.

To exercise any of these rights, email hello@anyhook.net. We will respond within 30 days.

AnyHook operates globally. Your data may be processed in countries outside your own, including the United States. Where we transfer data from the EEA to third countries, we rely on Standard Contractual Clauses or equivalent safeguards as approved by the European Commission.

AnyHook is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this policy from time to time. When we make material changes, we will email registered users and update the "Last updated" date above. Continued use of the service after the effective date constitutes acceptance of the revised policy.

Questions or requests regarding this policy: hello@anyhook.net