Privacy Policy

1. Introduction

Proxyweb ("we", "us", "our") operates the proxyweb.app website and service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Password (hashed, never stored in plaintext)
• IP address at registration and login

2.2 Webhook Data

When webhooks are received by your endpoints, we store:

• HTTP method, headers, body, query parameters
• Source IP address
• Timestamps

All webhook payloads are encrypted at rest using AES-256-GCM. We cannot read your webhook content. Encryption keys are unique per installation.

2.3 Usage Data

We collect anonymized usage analytics including page views, feature usage, and performance metrics to improve the service.

2.4 API Logs

When you use our REST API, we log the endpoint path, HTTP status, duration, and a truncated request body for debugging and rate-limiting purposes.

3. How We Use Your Information

• To provide and maintain the service
• To authenticate you and manage your account
• To process and forward your webhooks
• To send service-related notifications (account verification, security alerts)
• To detect and prevent abuse, fraud, and security threats
• To improve and optimize the service

4. Data Retention

Webhook data is retained according to your plan's retention period (14–365 days). After the retention period, webhook data is permanently deleted. Account data is retained until you delete your account.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• When required by law or legal process
• To protect our rights, property, or safety
• With service providers who assist in operating our service (hosting, database, email delivery), under strict data processing agreements

6. Data Security

We implement industry-standard security measures:

• AES-256-GCM encryption for all webhook payloads at rest
• HTTPS/TLS encryption for all data in transit
• Hashed passwords using bcrypt
• Rate limiting and IP-based abuse detection
• Regular security audits

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data via our API
• Object to processing of your data
• Withdraw consent at any time

To exercise these rights, contact us at support@proxyweb.app.

8. Cookies

We use essential session cookies to maintain your login state. We do not use third-party tracking cookies or advertising cookies.

9. International Data Transfers

Our application and data storage are provided through secure, industry-leading cloud and backend infrastructure located in the United States and/or the European Union. Regardless of where your data is processed, we apply the same safeguards and contractual protections, in accordance with applicable data protection laws (including the GDPR where it applies to you).

10. Children's Privacy

Our service is not intended for users under the age of 16. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

12. Compliance & Certifications

Proxyweb maintains a security and compliance program aligned with leading industry standards:

• SOC 2 Type I - assessed against the AICPA Trust Services Criteria (security, availability, confidentiality). Report available to customers under NDA.
• HIPAA - we support HIPAA-aligned processing of protected health information (PHI) and offer a Business Associate Agreement (BAA) for eligible plans.
• GDPR - see Sections 7 and 9 for data-subject rights and international transfer safeguards.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at:
support@proxyweb.app