Privacy

Hooksmith stores the minimum it needs to run your hooks: your account email, your hook definitions, and the webhook events and deliveries your hooks process. Event payloads are retained for the window of your plan (7 days on Free, 30 days on Pro) and then deleted.

Secrets referenced from YAML with ${SECRET} are resolved from your vault at delivery time. We never log resolved secret values.

We do not sell data or use third-party advertising trackers. Billing runs through Stripe; transactional email through Resend.

Questions or deletion requests: write to the operator listed on your workspace, or delete your hooks and account from the CLI.