Privacy Policy

What's collected, and why

• Google account info: your email address and Google account id, from signing in with Google. Used only to identify your account and log you in -- nothing else is requested from your Google account, and no separate password exists to leak.
• Project configuration: project names, subdomains, target URLs, and any signature-verification/rate-limit settings you choose to set. This is the data you configure Vixify with, so it can do its job.
• Webhook content: the headers and body of webhooks sent to your project's subdomain, and the response your target sends back. Retention depends on your plan and whether delivery ever succeeded -- exact rules are on /help, not repeated here. This data is whatever your webhook sender put in the request; Vixify doesn't inspect or use its contents for anything beyond delivering and displaying it to you.
• Billing info: handled entirely by Lemon Squeezy (our payment processor and merchant of record) -- Vixify only ever receives your email, a subscription status, and Lemon Squeezy's own internal ids via their webhook. Card numbers, billing address, and payment details go directly to Lemon Squeezy, never to Vixify.

What's not collected

• No analytics, tracking pixels, or ad-tech scripts of any kind run on this site or the dashboard -- you can verify this yourself, the pages are plain HTML/CSS/JS with no build step and no third-party script tags to hide anything in.
• No cookies beyond the ones needed to keep you signed in (a signed session cookie) and a short-lived one used only during the Google login handshake. Nothing is used to track you across sites or sessions.
• Your webhook content is never sold, shared, or used to train anything.

Who else sees data

• Google -- for the OAuth sign-in itself; see Google's own privacy policy for what they do with that.
• Lemon Squeezy -- for billing, as described above.
• Cloudflare -- Vixify runs entirely on Cloudflare's infrastructure (Workers, D1, R2), which is where all the data above is actually stored and processed. No other infrastructure provider is involved.
• Nobody else. No analytics vendor, no CRM, no marketing tool.

Your data, your control

• You can rename, edit, or delete a project (and its delivery history) yourself, any time, from the dashboard.
• There's no self-serve "delete my entire account" button yet -- email us (see /help) and we'll delete your account and everything under it by hand. That's a manual process today, stated honestly rather than pretending a button exists.
• Deleting a project removes its delivery records and the stored payload/response for every one of its deliveries -- immediately, not on a delayed cleanup job.

Changes & contact

This page will be updated if what's actually collected changes -- with a new date at the top. Questions or a deletion request: see the contact address on /help.