Privacy Policy
We process personal data only as necessary to operate this service, in line with the GDPR. The controller is the operator named in the imprint.
Data we process
Account data (email), webhook configuration and payloads you send, and device push tokens used solely to deliver your notifications.
Legal basis
Processing is based on the performance of our contract with you (Art. 6 (1)(b) GDPR) and our legitimate interest in a secure, abuse-resistant service (Art. 6 (1)(f) GDPR).
Hosting & push delivery
Infrastructure runs on Amazon Web Services; push notifications are delivered via the Expo/Apple/Google push services as processors on our behalf.
Retention
Messages are stored only briefly and expire automatically. Account data is kept until you delete your account.
AI connectors (MCP)
If you connect an AI client such as Claude or ChatGPT, it acts on your behalf with only the permissions you approved, and can read your webhooks, your messages and their payloads, and send you notifications. What it reads is then processed by that provider under their policy, not ours. We store the client's registration and your grant; you can revoke it at any time in your settings.
Your rights
You may request access, rectification, erasure, restriction, and data portability, and may lodge a complaint with a supervisory authority. To exercise any right, contact us at the address in the imprint.
info@sp33c.tech