Privacy policy

Effective November 2, 2026. This policy describes how Cascadehook, independently operated from India, processes information while providing webhook delivery.

Information we process

• Account identifiers, authentication information supplied by Clerk, organization memberships, and profile details needed for account and invitation features.
• Endpoint URLs, subscriptions to event types, event payloads, delivery and attempt metadata, and configuration you supply.
• API-key hashes and display prefixes, encrypted endpoint signing secrets, and encrypted invitation email payloads. API keys are disclosed once when created.
• Support conversations, invitation email addresses, email delivery status, and operational logs needed to operate and protect the service.

How information is used

We use this information to authenticate users, enforce organization access, deliver events to the endpoints you configure, send transactional messages, answer support requests, prevent abuse, and diagnose failures.

You control the event payloads and receiver destinations. Avoid publishing data you do not have permission to share. Receivers independently control the data delivered to them.

Service providers

Clerk processes authentication and identity; Resend processes transactional and support email. Our hosting and database providers process application data to run the service. These providers may process data outside India under their own service terms and privacy policies.

Retention and deletion

Event payloads and delivery history are removed by scheduled retention cleanup. Active deliveries and recent replay work can delay cleanup. Aggregate usage and operational records can remain after event payloads are removed. Notification history is normally retained for 90 days.

Account and organization deletion request background cleanup. Provider records and backups may persist under their retention policies. Email us for questions about support-message retention or deletion.

Browser storage

Authentication uses Clerk-managed session mechanisms. Cascadehook also stores preferences such as theme choice. Application code does not save project API keys or signing secrets in browser storage.

Your choices and contact

You can manage resources and request account deletion in the dashboard. Contact support@mail.cascadehook.com for access, correction, or deletion requests, or questions about this policy. We may verify your identity before acting on a request.

Policy updates

We will publish updates here and provide notice of material changes through the service or an appropriate contact channel.