Privacy Policy
We process personal data only as necessary to operate this service, in line with the GDPR. The controller is the operator named in the imprint.
Data we process
Account data (email), webhook configuration and payloads you send, and device push tokens used solely to deliver your notifications.
Legal basis
Processing is based on the performance of our contract with you (Art. 6 (1)(b) GDPR) and our legitimate interest in a secure, abuse-resistant service (Art. 6 (1)(f) GDPR).
Hosting & push delivery
Infrastructure runs on Amazon Web Services; push notifications are delivered via the Expo/Apple/Google push services as processors on our behalf.
Security monitoring
To protect our systems against attacks and misuse, we analyse server, firewall and application logs (including IP address, time, requested address, browser identifier and error messages) in a security monitoring system. It runs on servers of Hetzner Online GmbH in Germany. The legal basis is our legitimate interest in IT security (Art. 6(1)(f) GDPR, Recital 49). The data is deleted after 90 days unless it is needed to investigate a security incident.
Retention
Messages are stored only briefly and expire automatically. Account data is kept until you delete your account.
AI connectors (MCP)
If you connect an AI client such as Claude or ChatGPT, it acts on your behalf with only the permissions you approved, and can read your webhooks, your messages and their payloads, and send you notifications. What it reads is then processed by that provider under their policy, not ours. We store the client's registration and your grant; you can revoke it at any time in your settings.
Your rights
You may request access, rectification, erasure, restriction, and data portability, and may lodge a complaint with a supervisory authority. To exercise any right, contact us at the address in the imprint.
info@sp33c.tech