Terms of Service

In short (this summary isn't the contract, but it's honest): webhook.co is a tool for receiving, inspecting, verifying, replaying, and delivering webhooks, operated by a solo developer. You own the data you send through us — we only process it to run the service for you. Use it lawfully and don't turn it into attack or spam infrastructure. The service is provided "as is", with no uptime guarantee on self-serve plans. If we ever owe you anything, it's capped at what you paid us in the last 3 months (or €100, whichever is greater). You can cancel anytime; you only pay for the usage you actually consume. These terms are governed by Portuguese law, and you keep every consumer right the law gives you.

1. Who we are, and agreeing to these terms

webhook.co ("webhook.co", "we", "us", "our") is operated by Sourabh Choraria, a sole trader based in Porto, Portugal. You can reach us at sourabh@webhook.co.

These Terms of Service (the "Terms") are a legal agreement between you (or the organisation you represent — "you", "your") and webhook.co, covering your use of our websites, APIs, command-line tools, dashboard, MCP server, and related services (together, the "Service"). By creating an account, or by accessing or using the Service, you agree to these Terms. If you're agreeing on behalf of an organisation, you confirm you're authorised to bind it.

If you don't agree to these Terms, please don't use the Service.

2. What the Service does

webhook.co lets you create endpoints that receive incoming HTTP webhooks, inspect and verify them, store them so you can search and replay them, deliver them onward to destinations you configure, and trigger automated or agent workflows. The exact features available to you depend on your plan and may change over time (see §12).

The Service inspects and stores the content of the webhooks you send through it — that's the core of what it does. It is not an end-to-end-encrypted or "zero-knowledge" service, and we don't claim to be: to inspect, verify, replay, and deliver your webhooks, we necessarily process their contents. See our Privacy Policy for how we handle that data.

Scope — the hosted Service, not self-hosted software. These Terms (and our Privacy Policy) govern the hosted webhook.co Service that we operate at the webhook.co domains. Much of webhook.co is open source: the core platform and the official SDKs and CLI are published at github.com/webhook-co under the Apache License 2.0, while certain enterprise and control-plane components are proprietary and separately licensed. If you obtain that software and run it yourself, your use of the software is governed by its applicable licence (for the open-source parts, Apache-2.0) — not by these Terms — and you alone are responsible for your own deployment and any data it processes. We don't provide support for, or assume any responsibility or liability for, self-hosted deployments.

3. Your account

You need an account to use most of the Service. You must provide accurate information, keep your credentials (including API keys and ingest tokens) secure, and you're responsible for everything that happens under your account. Tell us promptly at sourabh@webhook.co if you believe your account or a credential has been compromised.

You must be at least 16 years old (or the age of digital consent in your country) and legally able to enter into these Terms. The Service is not directed to children.

4. Acceptable use

You may use the Service only for lawful purposes and in line with these Terms. Because webhook.co receives arbitrary data and can deliver it onward to destinations you choose, we're strict about misuse. You must not, and must not allow anyone else to:

• send, store, or transmit content that is illegal, or data you don't have the lawful right to process;
• use the Service to build or operate attack infrastructure — including malware, command-and-control, exploit delivery, phishing, or using outbound delivery/replay to flood, probe, or attack any system you don't own or aren't authorised to test;
• use the Service for unsolicited bulk messaging, spam, or as an open relay;
• resell, sublicense, or share the Service outside your account, or evade plan limits or the free allowance by creating multiple accounts;
• reverse engineer, disrupt, or probe the Service or its security, or attempt to access data that isn't yours.

Regulated data. The Service is not designed for, and is not certified to handle, protected health information (PHI) under HIPAA, full payment-card data (PCI DSS), or similarly regulated categories. You may choose to send such data, but if you do, you do so at your own risk and are solely responsible for meeting any legal or contractual requirements that apply to it; we make no representations of suitability and provide no BAA or PCI attestation.

We don't monitor your content, and we have no duty to. But we may — without any obligation to first review content — investigate suspected violations and act on abuse reports, including by removing content or suspending access (see §11).

5. Your data and content

You own your data. As between you and us, you retain all rights to the webhooks, payloads, and other content you send through or store on the Service ("Your Content"). You grant us a limited, worldwide, royalty-free licence to host, process, transmit, and display Your Content solely to provide, secure, support, and improve the Service for you, and as described in our Privacy Policy. We don't sell Your Content and we don't use it to build advertising profiles.

You're responsible for Your Content and for having the rights and lawful basis to send it to us — including, where the webhooks you capture contain other people's personal data, for being the controller of that data (we act as your processor for it; see the Privacy Policy and, for enterprise arrangements, a Data Processing Agreement).

6. Plans, billing, renewals, cancellation and refunds

Plans. We offer a free plan with a one-time usage allowance, paid self-serve plans, and enterprise plans arranged separately. Current prices and included volumes are shown at webhook.co/pricing. Prices are in euros (€) and exclusive of any taxes, which we'll add where required.

How charging works. Paid plans have a fixed recurring plan fee, billed in advance for each billing period, plus usage above your plan's included volume ("overage"), which is metered and billed in arrears — meaning you're only ever charged for overage you actually use.

Auto-renewal. Paid subscriptions renew automatically at the end of each billing period at the then-current price, until you cancel. By subscribing, you authorise us (through our payment processor, Stripe) to charge your payment method for each renewal. We'll make the renewal terms clear at checkout.

Cancellation. You can cancel anytime from your account. Cancellation takes effect at the end of your current paid period — you keep access until then, and you won't be charged again after that.

Refunds. Because overage is billed in arrears, you only pay for what you use, so there's nothing unused to refund there. For the prepaid plan fee, if you cancel, we'll refund the unused portion based on your actual usage — that is, in proportion to how little of your plan's included volume you consumed in the period — rather than by counting calendar days. The free plan involves no charge and so no refund.

Your consumer rights. If you're a consumer in the EU/EEA, you have a statutory 14-day right of withdrawal. Where you ask us to start providing the Service immediately, you may be asked to acknowledge that starting reduces or removes that right; even so, you'll never be charged for more than the Service actually supplied to you. Nothing in this section limits any non-waivable rights you have under Portuguese or EU consumer law.

Non-payment. If a charge fails, we may retry, and we may suspend or downgrade paid features until payment is resolved.

7. Availability and support

We work hard to keep the Service running, but on the free and self-serve paid plans it's provided on a best-effort basis with no guaranteed uptime or service-level commitment. We may perform maintenance, and features may occasionally be unavailable. Formal service-level agreements (SLAs) and response-time commitments are available only under a separate enterprise agreement.

Support on self-serve plans is best-effort by email at sourabh@webhook.co. We don't commit to specific response times except where a separate agreement says so.

8. The Service is provided "as is"

To the fullest extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, whether express or implied — including implied warranties of merchantability, fitness for a particular purpose, non-infringement, and any warranty that the Service will be uninterrupted, timely, secure, or error-free. Some warranties can't be excluded under applicable law; nothing here excludes them where that's the case.

9. Limitation of liability

Nothing in these Terms limits liability that can't be limited by law — including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for gross negligence or wilful misconduct, or any of your non-waivable rights as a consumer under Portuguese/EU law.

Subject to that:

• No indirect damages. Neither party is liable for indirect, incidental, special, consequential, or exemplary damages, or for lost profits, lost revenue, lost business, or lost or corrupted data, even if advised of the possibility.
• Cap. Each party's total aggregate liability arising out of or relating to the Service and these Terms is limited to the greater of (a) the amount you paid us for the Service in the 3 months before the event giving rise to the claim, or (b) €100.

These limits apply to the maximum extent permitted by applicable law and regardless of the theory of liability.

10. Indemnification

You'll defend and indemnify us against third-party claims, and the resulting losses, arising from Your Content, your use of the Service, or your breach of these Terms or of applicable law. We'll defend and indemnify you against third-party claims that the Service itself, as provided by us, infringes that third party's intellectual property rights. Each side must promptly notify the other of a claim and reasonably cooperate.

11. Suspension and termination

You may stop using the Service and close your account at any time.

We may suspend or terminate your access — and, where the situation demands it, without prior notice — if you breach these Terms (including the acceptable-use rules in §4), if your use poses a security, legal, or operational risk to us or to others, or if required by law. Where practical and lawful, we'll give you notice and a chance to fix the problem first.

On termination, your right to use the Service ends. We'll handle your data as described in our Privacy Policy, including honouring deletion and erasure requests.

12. Changes to the Service and to these Terms

We may change, add, or remove features of the Service over time. We may also update these Terms. For material changes to these Terms, we'll give reasonable advance notice by email or in-app, and post the updated "Last updated" date. Changes aren't retroactive, and if you've signed a separate enterprise agreement, that agreement's change terms control for you. If you keep using the Service after a change takes effect, you accept the updated Terms; if you don't agree, you can stop using the Service and cancel.

13. Intellectual property

We (and our licensors) own the Service, including its software, design, and trademarks. We grant you a limited, non-exclusive, non-transferable right to use the Service under these Terms. You get no rights to our software or marks beyond that. The Service incorporates both open-source components (licensed to you under their own licences — see §2) and proprietary components; nothing in these Terms limits your rights under an applicable open-source licence, and no such licence grants you rights in the "webhook.co" or "wbhk" names or logos. If you send us feedback or suggestions, you grant us a perpetual, royalty-free right to use them without obligation to you.

14. Governing law and disputes

These Terms are governed by the laws of Portugal, without regard to conflict-of-laws rules. Any dispute will be subject to the courts of Portugal — but if you're a consumer, this doesn't deprive you of the protection of the mandatory laws of your country of residence or of your right to bring proceedings there where the law allows. We don't require arbitration. EU consumers may also use the European Commission's Online Dispute Resolution platform.

15. Enterprise and separate agreements

If you and we sign a separate written agreement for the Service (for example, an enterprise order form or master services agreement, with its own SLA, Data Processing Agreement, or negotiated terms), that agreement governs to the extent it conflicts with these Terms for that use.

16. General

These Terms (plus any policies they link to and any separate agreement you've signed) are the entire agreement between us about the Service. If a provision is found unenforceable, the rest stays in effect. Our not enforcing a right isn't a waiver of it. You may not assign these Terms without our consent; we may assign them to a successor to our business. Notices to you may be given by email or in-app; notices to us go to sourabh@webhook.co.

Contact: Sourabh Choraria (webhook.co) — sourabh@webhook.co