Terms of service

HookStead is provided by Siddhesh Sule, trading as Zyloft, Lupfenstr. 12, 78532 Tuttlingen, Germany ("we", "us"). By creating an account you accept these terms on behalf of yourself or the organization you represent ("you"), and confirm you have the authority to do so.

HookStead is only for businesses, freelancers and other professional users (§ 14 BGB). It is not offered to consumers. Your own terms and conditions do not apply, even if we don't object to them.

HookStead receives webhooks on URLs we give you, verifies and stores them, forwards them to the endpoints you configure, retries failed deliveries, and lets you inspect, search, replay and monitor them in the dashboard and through the API. Features and limits depend on your plan, as described on the pricing page and in the documentation.

Public beta. HookStead is in public beta. We continue to develop it, and features may change. We will give at least 30 days' notice by email before removing a feature that paid plans rely on, and you may then cancel and receive a pro-rata refund of prepaid fees for the remaining period.

Give accurate details and keep them current. Keep your credentials, API keys and signing secrets confidential. You are responsible for activity under your organization's accounts and keys, and for the people you invite. Tell us promptly at security@hookstead.dev if you suspect misuse.

• You decide which senders and destinations you connect and what data they carry, and you need the right to process it, including a legal basis for any personal data.
• Your endpoints should verify HookStead's signature and handle duplicate deliveries: delivery is at least once, so the same event can arrive more than once.
• Keep copies of anything you need beyond your plan's retention period. HookStead forwards and keeps webhooks for a limited time; it is not an archive or a backup of your data.
• You only point destinations at systems you own or are authorized to send data to.

You must not use HookStead to:

• send, store or forward unlawful content, malware, or data you have no right to process;
• attack, probe, scan or overload systems, ours or anyone else's, including by pointing destinations at them;
• send spam or unsolicited messages;
• get around plan limits, rate limits, quotas or security controls, for example with multiple free accounts;
• reverse-engineer the hosted service, or resell it without our written agreement.

We may suspend affected sources, destinations or accounts if they break these rules or put the service or others at risk. We tell you beforehand where possible and restore access once the problem is fixed. Report abuse to security@hookstead.dev.

• Each plan has a monthly event quota, a request rate limit, a maximum payload size, a retention period and a maximum number of delivery attempts, listed on the pricing page.
• Requests above the rate limit, or after the monthly quota is used up, are refused with HTTP 429 and a Retry-After header; payloads above the size limit with HTTP 413. Refused requests are not stored, so your provider's own retries apply. Quotas reset on the 1st of each month (UTC).
• Plans described as unlimited are subject to fair use: usage far beyond comparable customers may need a custom agreement.

The Free plan costs nothing; we may change its limits with 30 days' notice. Paid plans are billed in advance, monthly or yearly, through our payment provider Stripe, and renew automatically for the same period until cancelled. Upgrades apply immediately and are charged pro rata. Downgrades and cancellations take effect at the end of the paid period. Prices are in euros. No VAT is charged: small business under § 19 UStG (Kleinunternehmerregelung).

If a payment fails, you keep your plan for 7 days while you update your payment method; after that, the organization moves to the Free plan. We may change prices with at least 30 days' notice by email; changes apply from your next billing period, and you can cancel before then. Invoices are available in the billing portal. Refunds follow our refund and cancellation policy, which forms part of these terms.

You keep all rights to the data you send through HookStead. You give us the rights needed to process it to provide the service. We process personal data in it only as your processor under our data processing agreement, which forms part of these terms. We delete it after your plan's retention period, when you delete it, or when your account closes. How we handle your account data is described in the privacy policy.

We may use anonymous, aggregated usage statistics (for example event counts and delivery rates) to run and improve the service; they never contain your payloads or identify you.

We aim for high availability but don't guarantee uninterrupted service, and offer no service level agreement unless agreed in writing. Webhooks we have acknowledged with a 2xx response are stored durably and delivered with retries. Planned maintenance is announced in advance where it may cause noticeable downtime. Current status is on the status page. Support is provided by email at support@hookstead.dev, usually within one business day.

We keep all rights to HookStead, its software and its brand. You get a non-exclusive, non-transferable right to use the service for the duration of the agreement. If you send us suggestions, we may use them freely, without obligation to you.

We are liable without limitation for intent and gross negligence, for injury to life, body or health, under a guarantee we have given, and under the Product Liability Act. For slight negligence we are liable only for breach of essential contractual obligations (those that make the agreement possible and on which you may rely), limited to the damage typical and foreseeable for this kind of contract. Otherwise, liability for slight negligence is excluded.

Where liability is limited, it is limited in total to the fees you paid in the 12 months before the claim arose, and for the Free plan to € 100. For lost data, we are liable only for the effort of restoring it from copies you should have kept (section 4). These limits also apply to our staff and agents.

You indemnify us against third-party claims arising from content you send through HookStead or from your breach of these terms, unless you are not at fault.

The agreement runs until terminated. You can cancel a paid plan at any time in Settings → Billing, effective at the end of the paid period. You can close a Free account at any time by writing to support@hookstead.dev. We can end a Free account with 30 days' notice, and a paid plan at the end of its billing period with 30 days' notice. Either party may terminate without notice for good cause, for example serious or repeated breach of these terms.

After termination, your webhook data is deleted as described in the data processing agreement. Sections 8, 11 and 14 continue to apply.

We are not responsible for delays or failures caused by events outside our reasonable control, such as outages of hosting or network providers, attacks, natural disasters or official orders. Your webhook providers' and endpoints' own availability is outside HookStead.

We may change these terms with 30 days' notice by email. If you don't object before the change takes effect, the new terms apply; we point this out in the notice. If you object, either party may terminate when the change takes effect. Notices to us go to legal@hookstead.dev; notices to you go to the email address of your organization's owner.

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a merchant, a legal entity under public law or have no general place of jurisdiction in Germany, the exclusive place of jurisdiction is Tuttlingen, Germany. If any provision is invalid, the rest of these terms remain in effect.