Privacy Policy

Last updated: November 22, 2025

1. Introduction

Notifs ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our notification infrastructure service.

By using Notifs, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (optional)
  • Password (stored securely using industry-standard hashing)
  • Payment information (processed securely by Stripe)

2.2 Usage Data

We believe in minimal data collection. For website analytics, we use privacy-focused analytics that do not track individual users, use cookies, or collect personal information. Our analytics provider does not collect:

  • IP addresses
  • Browser fingerprints
  • Personal identifiers
  • Cross-site tracking data

For service operation, we collect only what is necessary:

  • API usage metrics (request counts, response times)
  • Webhook request logs for debugging (retained for 30 days)
  • Error logs to improve service reliability

2.3 Webhook Data

When you send notifications through our webhooks, we temporarily process the notification content to deliver it to your configured services. For debugging and security purposes, webhook request logs include:

  • Request headers and timestamps
  • Response status codes and timing
  • IP address of the requesting server (this is typically your server's IP, not end-user IPs)
  • Signature verification status

Webhook logs are retained for 30 days to help you debug integration issues, then automatically deleted. Notification content is processed transiently and not permanently stored beyond delivery.

3. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze usage patterns and trends
  • Detect, prevent, and address technical issues and fraud
  • Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party vendors who assist in providing our services (e.g., Stripe for payments, Supabase for data storage)
  • Notification Services: When you configure integrations (Discord, Slack, email providers), we share necessary data to deliver notifications
  • Legal Requirements: When required by law, subpoena, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • HMAC-SHA256 signature verification for webhooks
  • Secure API key hashing (keys are never stored in plaintext)
  • Regular security audits and updates

6. Data Retention

We retain your account information for as long as your account is active. Webhook request logs are retained for 30 days for debugging purposes. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

We believe you should always have full visibility and control over your data. Regardless of your location, you have the right to:

  • Access your data: All information we store about you is visible directly in your Notifs dashboard - your webhooks, notifications, request logs, and account settings
  • Correct your information: Update your account details anytime through your settings
  • Export your data: Download your webhook configurations and notification history
  • Delete your account: Request complete deletion of your account and all associated data

For data export or account deletion requests, contact us at privacy@notifs.io. We aim to respond within 48 hours.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

9. Children's Privacy

Notifs is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@notifs.io