Privacy and data handling

HookBench stores the account identifier supplied by ChatGPT sign-in, your projects, webhook requests, saved test cases, verified destinations, usage counters, and subscription status. For annual access, we store the purchase email, assigned user emails, license fingerprint, encrypted license key, seat limit, expiry, and verification status. We verify your license with Payhip, including periodic checks for disabled or refunded purchases.

Your webhook data

Requests are accessible only to the account that owns the project. Endpoint URLs are secret receiving addresses, not access links to stored data. Common sensitive headers are removed before storage. Request bodies and query strings are not automatically redacted: use test data.

Retention and deletion

Request history is available for 24 hours on Free and seven days on Pro. Expired data is removed in batches as the application receives traffic. Saved test cases and project settings persist until you delete them. Deleting a project removes its requests, cases, and destinations. License, seat, subscription, and usage records are retained to operate access and enforce limits. Purchasers can see the email addresses and claim status of the seats they assign, but cannot see another user’s projects.

Service providers

The application uses Sites hosting and Cloudflare storage. ChatGPT provides sign-in. Payhip handles annual purchases using the payment methods configured by the seller. Lemon Squeezy manages legacy subscriptions. HookBench does not store payment card details.

Current release

This is a beta service. Paid checkout remains unavailable until the operator has connected billing and completed its launch requirements.