Privacy Policy

International Technology Management (ITM) Pty Ltd (“we”, “us”, “our”) operates AgentWebhook. This Privacy Policy explains how we collect, use, and protect your information.

1. Information we collect

Account information

When you create an account, we collect your email address, workspace name, and password (stored as a bcrypt hash). We do not store your password in plain text.

Webhook data

When webhook events are sent to your ingest URLs, we store the payload, headers, and metadata for the duration of your retention period. This data belongs to you and is processed solely to provide the relay service.

Usage data

We track aggregate usage metrics (event counts, API calls) to enforce plan limits and provide usage analytics in your dashboard.

Audit logs

We log account actions (API key creation, source changes, login events) with timestamps and IP addresses for security and accountability.

2. How we use your information

• To provide and operate the AgentWebhook service
• To authenticate you and secure your account
• To enforce plan limits and billing
• To send transactional emails (password resets, email verification)
• To respond to support requests
• To comply with legal obligations

We do not sell your data. We do not use your webhook payloads for any purpose other than delivering them to you.

3. Data storage and security

All data is encrypted in transit (TLS) and at rest. Webhook payloads and secrets are stored in encrypted databases. API keys are hashed. Sessions are signed with HMAC. Infrastructure is hardened with network isolation and regular security updates.

4. Data retention

Webhook events are retained according to your plan's retention period (24 hours to 30 days depending on plan). You can configure a shorter retention in the dashboard. Account data is retained while your account is active. When you delete your account, all associated data is permanently deleted.

5. Cookies

We use session cookies to authenticate your dashboard session and a CSRF cookie for security. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

6. Third-party services

We use the following third-party services:

• Payment processor — We use a third-party payment provider for billing. We do not store your credit card details.
• MailerSend — Transactional emails (password resets, email verification).

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data
• Object to processing

To exercise any of these rights, contact us at ben@businessnet.com.au. We will respond within 30 days.

8. International transfers

Our servers are located in Australia. If you access the service from outside Australia, your data may be transferred to and processed in Australia.

9. Children

AgentWebhook is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice in the dashboard.

11. Contact

International Technology Management (ITM) Pty Ltd
Suite C/5 Discovery Dr, North Lakes QLD 4509, Australia
Email: ben@businessnet.com.au