1. Introduction
Callback Handler ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our webhook testing and callback inspection service.
2. Information We Collect
2.1 Authentication Information
When you sign in using OAuth providers (GitHub or Google), we collect:
- Your email address
- Your name (if provided)
- Your profile picture (if provided)
- Your provider account ID
2.2 Webhook Data
When you use our service to capture HTTP requests, we store:
- HTTP request headers
- Request body/payload
- HTTP method (GET, POST, etc.)
- Request timestamp
- IP address of the requester
- Query parameters
3. How We Use Your Information
We use the collected information to:
- Provide and maintain our webhook testing service
- Authenticate your identity when you sign in
- Store and display captured HTTP requests for your inspection
- Send you real-time updates about incoming requests
- Improve our service and user experience
4. Data Storage
Your data is stored using Vercel KV (Redis) infrastructure. We retain:
- Captured HTTP requests for up to 30 days
- User account information while your account is active
- Only the last 100 requests per webhook endpoint
Data older than 30 days is automatically deleted. You can delete your data at any time by removing your webhook endpoints.
5. Third-Party Services
5.1 OAuth Providers
We use OAuth authentication through GitHub and Google. These services have their own privacy policies governing the use of your information. We only receive the information you authorize us to access.
5.2 Pusher
We use Pusher for real-time updates. Pusher may collect technical information about your connection. Please review Pusher's privacy policy for more information.
5.3 Vercel
Our service is hosted on Vercel. Vercel processes your data according to their privacy policy and terms of service.
6. Cookies and Sessions
We use session cookies to maintain your authentication state. These cookies are essential for the service to function and are automatically deleted when you sign out or after a period of inactivity.
7. Data Security
We implement reasonable security measures to protect your information. However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Your Rights
You have the right to:
- Access your personal information
- Delete your account and associated data
- Request correction of inaccurate information
- Opt out of certain data collection (by not using the service)
To exercise these rights, please contact us using the information provided below.
9. Children's Privacy
Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us via GitHub issues.