Privacy Policy

Introduction

Relayhook ("we," "our," or "us") is operated by Connex. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our webhook relay service and website at relayhook.com.

By using Relayhook, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the service.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Password (stored securely using industry-standard hashing)
• Account creation date

Billing Information

When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We receive and store:

• Stripe customer ID
• Subscription status and plan type
• Billing history and invoice records

Usage Data

We collect information about your use of the service:

• API request counts and timestamps
• Webhook configuration metadata (names, IDs)
• Feature usage statistics

Webhook Transmission Data

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Relayhook service
• Process transactions and send related billing information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage trends to improve our service
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Encryption at Rest: Data stored in our databases (hosted on Supabase) is encrypted at rest
• Secure Infrastructure: Our services run on Heroku and Vercel, which provide enterprise-grade security and compliance
• Access Controls: Access to production systems is restricted to authorized personnel only
• Authentication: We use secure authentication mechanisms including hashed passwords and session tokens

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Logging and Troubleshooting

In certain circumstances, we may temporarily enable logging to diagnose and resolve technical issues. When logging is enabled:

• Logs are stored on encrypted servers (Heroku, Supabase)
• Access to logs is strictly limited to authorized technical personnel
• Logs are retained only for the duration necessary to resolve the issue
• Logs are deleted after troubleshooting is complete

Standard operational logging (error logs, access logs) does not include webhook payload content.

Third-Party Services

We use the following third-party services:

Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session and preferences:

• Essential Cookies: Required for authentication and core functionality
• Analytics: We may use Vercel Analytics to understand how users interact with our service

You can configure your browser to refuse cookies, but this may limit your ability to use certain features of the service.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained until you delete your account
• Usage Statistics: Retained for up to 24 months for analytics purposes
• Billing Records: Retained as required by law (typically 7 years)
• Webhook Payloads: Not stored or retained

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request a portable copy of your data
• Objection: Object to processing of your personal data

To exercise these rights, please contact us at privacy@relayhook.com.

Children's Privacy

Relayhook is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: