1. Introduction

Skooh ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our webhook forwarding service at skooh.io (the "Service").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

Skooh is the data controller responsible for your personal data. If you have any questions about this Privacy Policy, please contact us at [email protected].

3. Information We Collect

3.1 Information You Provide

Account Information: Email address, name, and password when you create an account
Payment Information: Billing details processed securely by Stripe (we do not store card numbers)
Support Communications: Information you provide when contacting us

3.2 Information Collected Automatically

Usage Data: Pages visited, features used, and actions taken
Device Information: Browser type, operating system, IP address
Webhook Data: Webhook payloads you send through our Service (retained for the period specified in your plan)

3.3 Cookies and Tracking

We use essential cookies for authentication and optional analytics cookies with your consent. See our Cookie Policy for details.

4. How We Use Your Information

We use your information for the following purposes (legal basis in brackets):

Provide the Service: Forward webhooks, manage your account (Contract)
Process Payments: Handle subscriptions and billing (Contract)
Send Service Updates: Important updates about your account (Legitimate Interest)
Improve the Service: Analyse usage to enhance features (Legitimate Interest)
Marketing: Send promotional emails only with your consent (Consent)
Security: Detect and prevent fraud or abuse (Legitimate Interest)
Legal Compliance: Meet regulatory requirements (Legal Obligation)

5. Data Sharing

We share your data only with:

Stripe: Payment processing (US, Privacy Shield certified)
Cloud Providers: Hosting and infrastructure (EU/UK data centres where possible)
Analytics: PostHog (privacy-friendly analytics with data processing in US/EU)
Email Providers: Transactional emails (Resend)

We do not sell your personal data to third parties.

6. Data Retention

Account Data: Retained while your account is active, plus 30 days after deletion
Webhook Payloads: Retained according to your plan (3-30 days), then permanently deleted
Payment Records: 7 years (legal requirement)
Analytics Data: 26 months

7. Your Rights (GDPR)

Under the UK GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in a structured format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time

To exercise these rights, email [email protected]. We will respond within 30 days.

8. International Transfers

Some of our service providers are based outside the UK/EU. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. See our Security page for more details.

10. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by posting a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact & Complaints

For privacy-related questions or to exercise your rights:

Email: [email protected]

If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

1. Introduction

2. Data Controller

Skooh is the data controller responsible for your personal data. If you have any questions about this Privacy Policy, please contact us at [email protected].

3. Information We Collect

3.1 Information You Provide

Account Information: Email address, name, and password when you create an account
Payment Information: Billing details processed securely by Stripe (we do not store card numbers)
Support Communications: Information you provide when contacting us

3.2 Information Collected Automatically

Usage Data: Pages visited, features used, and actions taken
Device Information: Browser type, operating system, IP address
Webhook Data: Webhook payloads you send through our Service (retained for the period specified in your plan)

3.3 Cookies and Tracking

We use essential cookies for authentication and optional analytics cookies with your consent. See our Cookie Policy for details.

4. How We Use Your Information

We use your information for the following purposes (legal basis in brackets):

Provide the Service: Forward webhooks, manage your account (Contract)
Process Payments: Handle subscriptions and billing (Contract)
Send Service Updates: Important updates about your account (Legitimate Interest)
Improve the Service: Analyse usage to enhance features (Legitimate Interest)
Marketing: Send promotional emails only with your consent (Consent)
Security: Detect and prevent fraud or abuse (Legitimate Interest)
Legal Compliance: Meet regulatory requirements (Legal Obligation)

5. Data Sharing

We share your data only with:

Stripe: Payment processing (US, Privacy Shield certified)
Cloud Providers: Hosting and infrastructure (EU/UK data centres where possible)
Analytics: PostHog (privacy-friendly analytics with data processing in US/EU)
Email Providers: Transactional emails (Resend)

We do not sell your personal data to third parties.

6. Data Retention

Account Data: Retained while your account is active, plus 30 days after deletion
Webhook Payloads: Retained according to your plan (3-30 days), then permanently deleted
Payment Records: 7 years (legal requirement)
Analytics Data: 26 months

7. Your Rights (GDPR)

Under the UK GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in a structured format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time

To exercise these rights, email [email protected]. We will respond within 30 days.

8. International Transfers

Some of our service providers are based outside the UK/EU. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9. Security

10. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

12. Contact & Complaints

For privacy-related questions or to exercise your rights:

Email: [email protected]

If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

1. Introduction

2. Data Controller

Skooh is the data controller responsible for your personal data. If you have any questions about this Privacy Policy, please contact us at [email protected].

3. Information We Collect

3.1 Information You Provide

Account Information: Email address, name, and password when you create an account
Payment Information: Billing details processed securely by Stripe (we do not store card numbers)
Support Communications: Information you provide when contacting us

3.2 Information Collected Automatically

Usage Data: Pages visited, features used, and actions taken
Device Information: Browser type, operating system, IP address
Webhook Data: Webhook payloads you send through our Service (retained for the period specified in your plan)

3.3 Cookies and Tracking

We use essential cookies for authentication and optional analytics cookies with your consent. See our Cookie Policy for details.

4. How We Use Your Information

We use your information for the following purposes (legal basis in brackets):

Provide the Service: Forward webhooks, manage your account (Contract)
Process Payments: Handle subscriptions and billing (Contract)
Send Service Updates: Important updates about your account (Legitimate Interest)
Improve the Service: Analyse usage to enhance features (Legitimate Interest)
Marketing: Send promotional emails only with your consent (Consent)
Security: Detect and prevent fraud or abuse (Legitimate Interest)
Legal Compliance: Meet regulatory requirements (Legal Obligation)

5. Data Sharing

We share your data only with:

Stripe: Payment processing (US, Privacy Shield certified)
Cloud Providers: Hosting and infrastructure (EU/UK data centres where possible)
Analytics: PostHog (privacy-friendly analytics with data processing in US/EU)
Email Providers: Transactional emails (Resend)

We do not sell your personal data to third parties.

6. Data Retention

Account Data: Retained while your account is active, plus 30 days after deletion
Webhook Payloads: Retained according to your plan (3-30 days), then permanently deleted
Payment Records: 7 years (legal requirement)
Analytics Data: 26 months

7. Your Rights (GDPR)

Under the UK GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in a structured format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time

To exercise these rights, email [email protected]. We will respond within 30 days.

8. International Transfers

Some of our service providers are based outside the UK/EU. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9. Security

10. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

12. Contact & Complaints

For privacy-related questions or to exercise your rights:

Email: [email protected]

If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.