Privacy Policy

hooksnode ("we", "us") receives events from your sources and delivers them to the destinations you set. This policy explains what data we collect, how we use it, and the choices you have.

Data we collect

• Account data: your name, email address, and sign-in details. If you sign in with Google or GitHub, we receive your name, email address, and profile picture.
• Event data: the webhook payloads, headers, and emails that your sources send to hooksnode, and the delivery results from your destinations.
• Connected account data: data from Gmail, Outlook, or IMAP mailboxes that you connect. See the sections below.
• Billing data: your plan and payment history. Our payment providers process your card details. We do not store full card numbers.
• Technical data: IP addresses and request logs, which we use for security and to fix problems.

How we use your data

We use your data only to provide, secure, and support the hooksnode service: to receive, store, filter, transform, and deliver your events, to retry failed deliveries, to show you your event history, to send service emails, and to process payments. We do not sell your data. We do not use your data for advertising.

Google user data

When you connect a Gmail account as a source, hooksnode asks for read-only access to your mail (the gmail.readonly scope).

• What we access: new messages that arrive after you connect, in the labels that you pick. We read the headers (such as From, To, and Subject) and the body of these messages. We also read your label list so that you can pick labels.
• How we use it: we turn each matching message into an email.received event and deliver it to the destinations that you set. If you turn on bank alerts, we read the message to make bank credit and debit events.
• What we never do: we never send, change, move, or delete your mail.
• Storage: we store the events made from your messages for the retention period of your plan. We encrypt your Google access tokens at rest.
• Sharing: we send the event data only to the destinations that you set. If you turn on AI reading for bank alerts on a source, we send the text of those alert emails to our AI provider to read the amounts. This is off unless you turn it on.
• Removal: when you delete the Gmail source, we stop reading your mail and revoke our access at Google. You can also remove our access at any time at myaccount.google.com/permissions.

Limited Use

hooksnode's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features that you see in hooksnode.
• We transfer Google user data to others only to provide these features, to obey the law, for security, or as part of a merger or sale of the company with your consent.
• We do not use or transfer Google user data for advertising, including personalized, retargeted, or interest-based ads.
• We do not sell Google user data, and we do not use it to decide credit or lending.
• We do not let people read Google user data unless you give consent for specific messages, it is necessary for security (such as to look into abuse), it is necessary to obey the law, or the data is combined and made anonymous for internal operations.
• We do not use Google user data to develop, improve, or train general AI or machine learning models.

Microsoft and IMAP mailboxes

When you connect an Outlook account or an IMAP mailbox, we read new mail in the folders that you pick, in the same way and for the same purposes as Gmail. We encrypt your Microsoft tokens and IMAP passwords at rest. You can remove access by deleting the source.

Service providers

We use these types of providers to run hooksnode. Each one gets only the data it needs to do its job:

• Cloud hosting and storage, to run the service and keep your data.
• Email delivery, to send you service emails.
• Payment processors (Paystack and Flutterwave), to take payments.
• AI providers, only for sources where you turn on AI reading for bank alerts.

How long we keep data

We keep events for the retention period of your plan. After that, we delete them or move them to encrypted archive storage. We keep your account data while your account is open. When you delete your account, we delete your data, except data that we must keep by law.

Security

We use HTTPS for all traffic. We encrypt OAuth tokens and mailbox passwords at rest. Access to production data is limited to the staff who need it to run the service.

Cookies

We use cookies only for sign-in sessions. We do not use tracking or advertising cookies.

Your choices and rights

You can see your events in the dashboard. You can disconnect any mailbox at any time. To get a copy of your data, correct it, or delete your account, email support@hooksnode.com.

Changes to this policy

If we make an important change to this policy, we will update the effective date and tell you by email or in the dashboard.

Contact

Questions about this policy: support@hooksnode.com.