Terms of Use — Webhook Box

1. Acceptance of the Terms

By accessing or using Webhook Box (“Service”), you declare that you have read, understood, and agree to be fully bound by these Terms of Use. If you do not agree with any condition described herein, you are not authorized to use the Service.

The Operator may update these Terms. Material changes that are adverse to Users (such as price increases, reduction of plan limits, or shortening of data retention) will be announced with reasonable advance notice — generally at least 15 days — via notice in the dashboard and/or email. Changes required by law, necessary to address security or abuse, or that do not materially disadvantage Users may take effect upon publication. Continued use of the Service after a change takes effect constitutes full acceptance of the updated Terms; Users who disagree may cancel before the new version takes effect.

The Service is intended for use by businesses and professionals and is not designed as a consumer service for domestic or household use. The Service is available only to individuals who are at least 18 years old or have full legal capacity to contract.

2. Definitions

“Service” means the Webhook Box platform, including its website, dashboard, APIs, endpoints, and related technical components.

“Operator” means the entity responsible for operating and providing the Service.

“User” means any individual or entity that accesses or uses the Service.

“User Data” or “Content” means any data, payload, webhook, file, header, parameter, or other information sent to or through the Service by the User.

“Workspace” means the tenancy container that owns Service resources (endpoints, webhooks, configurations, and related data) and holds the subscription. Users access a Workspace as members, each with a role (see Section 4-C).

“Third-Party Services” means external applications, APIs, platforms, or services that may interact with or be used together with the Service.

3. Description of the Service

Webhook Box is a platform designed to receive, process, display, temporarily store, export, and forward webhooks and other data sent by Users through HTTP requests or similar mechanisms.

The Service may provide endpoints for testing, inspecting, and routing incoming requests, allowing Users to analyze their integrations and automations.

The Service is provided “as is” and “as available”, without any warranty, express or implied, of continuous operation, specific performance, correct webhook delivery, data preservation, availability, or fitness for a particular purpose.

4. User Conduct and Responsibility for Content

The User is solely responsible for the way they use the Service and for all data, content, and requests that transit through Webhook Box, including but not limited to texts, headers, payloads, files, and any other information sent or received.

The Operator is not responsible for the content, origin, nature, type, accuracy, legality, or purpose of the data transmitted by Users on the platform. Any effect, consequence, or result arising from the submission, storage, forwarding, or export of such data is the exclusive responsibility of the User.

Any use of the Service for unlawful, abusive, fraudulent, offensive, or otherwise illegal purposes, or in violation of applicable law, is the exclusive responsibility of the User. The Operator shall not be liable for such misuse and may, at its sole discretion, suspend or terminate access, block endpoints, or cooperate with competent authorities when required by law.

The User represents that they have the lawful basis and necessary permissions for all data they direct to the Service — including personal data of third parties contained in requests sent to their endpoints — and is solely responsible for any action triggered from the content (resend, replay, forwarding to configured destinations, export). Endpoints without authentication enabled are accessible to anyone who knows the URL; the Operator does not guarantee URL secrecy.

The User agrees, among other things, not to:

(a) send malware, malicious code, spam, phishing, or any content that may damage systems or violate third-party rights;
(b) attempt to gain unauthorized access to accounts, servers, networks, or data of other users or the Operator;
(c) perform reverse engineering, decompile, modify, or interfere with the normal operation of the Service;
(d) circumvent technical limits, authentication systems, or security mechanisms;
(e) use the Service for denial-of-service attacks, abusive automation, massive scraping, or activities of a similar nature.

4-A. Sensitive Data Prohibition

The Service is not designed for, and must not be used to transmit or store: payment card data subject to PCI DSS; health data; sensitive personal data under art. 5, II of the Brazilian LGPD or special categories of personal data under art. 9 of the GDPR; or third-party production credentials.

The User agrees not to send such data through the Service, except under a specific written agreement with the Operator. Any such data sent in violation of this clause is the User’s sole responsibility, and the Operator shall have no liability whatsoever with respect to it, and may immediately suspend the account and remove the content.

4-B. Anonymous Capture

The Service allows creating test endpoints without an account (“anonymous capture”). By creating or using an anonymous endpoint, you accept these Terms. Anonymous endpoints: (a) expire and are permanently deleted, without notice, within 7 days or upon reaching their technical limits; (b) are accessible to anyone who knows the URL — do not send data that cannot be public; (c) carry no guarantee of availability or preservation; and (d) may be blocked at the Operator’s sole discretion.

Claiming an anonymous endpoint with an account subjects its data to the workspace plan’s conditions.

4-C. Workspaces and Collaboration

Service resources belong to a workspace. Invited members access workspace data according to their role (owner / write / read) — by inviting someone, the User acknowledges they will see the data captured in the workspace. The workspace owner controls members, plan, and billing; seats are charged according to the plan.

A member’s departure or removal does not delete the data or authorship records created during their participation, which are retained for the workspace’s legitimate audit interest.

5. Operation of the Service and Limitation of Liability

The User acknowledges that Webhook Box depends on third-party infrastructure, networks, and external services, including but not limited to cloud providers, hosting, authentication, and payment processors. Accordingly, the Operator does not guarantee:

(a) the delivery, retransmission, forwarding, logging, or export of any webhook or request;
(b) continuous, uninterrupted, or error-free operation;
(c) full preservation of data, logs, or history;
(d) compatibility with third-party systems, APIs, or integrations; and
(e) specific levels of performance, latency, throughput, or uptime.

To the maximum extent permitted by applicable law, the Operator shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages, nor for loss of data, loss of profits, business interruption, loss of goodwill, or any other loss or damage arising from the use or inability to use the Service, even if the Operator has been advised of the possibility of such damages.

No specific customization, adaptation to a particular environment, bespoke development, or availability SLA is guaranteed by the mere use of the Service, unless expressly agreed in writing between the User and the Operator.

6. Subscriptions, Payments, and Refunds

Paid plans are prepaid and recurring: each billing cycle is paid in advance and keeps the paid features active for that cycle only. Payments are processed exclusively through Stripe, which acts as a payment processor. The Operator does not store credit card data or other sensitive financial information, which remain under Stripe’s responsibility in accordance with its own privacy and security policies.

All fees are non-refundable and there are no pro-rata refunds, except where mandatory applicable law provides otherwise. Cancellation may be requested at any time and takes effect at the end of the current paid cycle.

If a renewal payment fails, is declined, charged back, or is not completed, paid features may cease immediately, at the Operator’s discretion: the workspace reverts to the Free plan’s limits and retention rules, and data exceeding those limits may be automatically deleted by rotation and cannot be recovered.

7. Fair Use and Technical Limits

The Operator may establish and enforce technical limits on the use of the Service, including but not limited to the number of requests, data volume, number of endpoints, maximum payload size, call frequency, and log retention.

The Operator may, at its sole discretion, block accounts, URLs, IP addresses, or API keys that cause or may cause performance degradation, downtime, or operational risk to the Service or to other Users. Current technical limits (such as requests per second and endpoints per plan) are published on the pricing page and may be enforced automatically.

The User is responsible for keeping their access credentials and API keys confidential, and for all activity performed with them. The User must notify the Operator immediately of any unauthorized use or leak; the Operator may revoke or rotate compromised credentials at any time, without liability for resulting unavailability.

8. Third-Party Services and Integrations

The Service may interact with Third-Party Services, such as external APIs, authentication providers, and other platforms. The Operator is not responsible for the content, availability, performance, or terms of such Third-Party Services.

The User is solely responsible for complying with any applicable terms and policies of Third-Party Services they choose to connect to or use together with the Service.

9. Intellectual Property

Webhook Box, including its source code, interfaces, layout, design, logos, and documentation, is the exclusive property of the Operator or its licensors. No intellectual property rights are transferred to the User, except for a limited, revocable license to use the Service in accordance with these Terms.

The content, data, and information submitted by Users remain their property. However, by using the Service, the User grants the Operator a non-exclusive, worldwide, royalty-free license to process, store, and display such data solely to the extent necessary for the operation of the Service.

The Operator may also generate and use aggregated and de-identified data derived from use of the Service — which does not identify any User or data subject — to operate, analyze, improve, and develop the Service.

10. Changes to the Service

The Operator may modify, suspend, or discontinue the Service, in whole or in part, at any time, with or without prior notice, and shall not be liable for any such modification, suspension, or discontinuation.

11. Termination

The Operator may suspend or terminate a User’s access to the Service, in whole or in part, at any time, especially in cases of breach of these Terms, abusive use, security risks, or failure to comply with legal obligations.

In case of suspension for breach of these Terms, abuse, or risk to the platform, no refund or credit is due for the suspension period. The Operator may preserve and provide data to competent authorities where required by law. Where suspension results from curable payment or technical issues, the Operator will seek to give reasonable notice and restore access promptly after resolution.

The User may request the closure of their account at any time, subject to the consequences in terms of loss of access, data, and history. Account deletion requires that: (a) any active paid subscription be canceled first; and (b) if the User owns a Workspace shared with other members, that Workspace be transferred or deleted first. After deletion, remaining data is purged as described in the Privacy Policy.

12. Indemnification

The User agrees to indemnify and hold the Operator harmless from any claims, liabilities, losses, or damages, including reasonable legal fees, arising from misuse or illegal use of the Service, violation of these Terms, or infringement of third-party rights caused by the User’s use of the Service or by the content they transmit.

13. Entire Agreement

These Terms of Use, together with the Privacy Policy, constitute the entire agreement between the User and the Operator regarding the Service, superseding any prior agreements or understandings related to the Service.

14. Severability

If any provision of these Terms is held to be invalid or unenforceable, such provision shall be enforced to the maximum extent possible, and the remaining provisions shall remain in full force and effect.

15. Governing Law and Jurisdiction

These Terms are governed by the laws of Brazil. The parties elect the courts of the District (Comarca) of Sorocaba, State of São Paulo, Brazil, as the competent venue to resolve any disputes arising out of or related to these Terms or the use of the Service, to the exclusion of any other, however privileged. This venue election does not apply to consumers, who retain the right to bring proceedings in the courts of their own domicile, and is without prejudice to other mandatory rights granted to consumers under applicable law.

16. Force Majeure

The Operator shall not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, civil unrest, epidemics or pandemics, governmental or regulatory action, labor disputes, power or telecommunications failures, denial-of-service or other attacks, or failures or disruptions of third-party infrastructure, networks, hosting, or service providers.

17. Assignment

The User may not assign or transfer these Terms, or any rights or obligations hereunder, without the Operator’s prior written consent. The Operator may freely assign or transfer these Terms, in whole or in part, including in connection with a merger, acquisition, reorganization, or sale of assets. These Terms bind and benefit the parties and their permitted successors and assigns.

18. No Waiver

The Operator’s failure to enforce any provision of these Terms, or to exercise any right hereunder, shall not constitute a waiver of that provision or right. No waiver shall be effective unless made in writing, and any waiver shall apply only to the specific instance for which it is given.

19. Survival

Provisions that by their nature should survive termination will survive, including but not limited to those concerning intellectual property, disclaimers and limitation of liability, indemnification, governing law, and these general provisions.