Privacy Policy

Last updated: September 2, 2026  |  Effective date: September 2, 2026

At Probe ("Probe", "we", "us", or "our"), we recognize that webhook payloads often contain sensitive integration parameters, authorization credentials, and proprietary application data. We are deeply committed to developer privacy, practicing data minimization, and maintaining complete transparency.

This Privacy Policy explains how we collect, use, store, encrypt, expire, and protect your information when you access our website, create an account, generate endpoints, or use our debugging tools. Please review this document alongside our Terms of Service.

1. Overview & Privacy Principles

Our engineering and operations are guided by foundational developer privacy principles:

• Data Minimization: We only collect data strictly necessary to deliver, maintain, and secure your webhook debugging workflows.
• Zero Data Monetization: We never sell, rent, or monetize your personal data or captured webhook payloads to advertisers or data brokers.
• Ephemeral Storage: Webhook request payloads are stored ephemerally and automatically purged according to your plan's retention window.
• Zero Model Training: We do not use your webhook payload contents to train public machine learning or AI models.
• Modern Cryptography: All data in transit is encrypted using TLS 1.3, and data at rest is encrypted using AES-256.

2. Information We Collect

We collect the following categories of information:

2.1 Account Information

When you register an account, we collect your name, email address, password hashes (secured via bcrypt/Argon2), OAuth provider identifiers (if signing in via GitHub or Google), and workspace preferences.

2.2 Webhook Request Payloads & Metadata

When external services transmit HTTP requests to your Probe endpoints, our servers log: HTTP method, URL path, query parameters, arrival timestamp, HTTP request headers (including content-type and signatures), request body (JSON, XML, text, binary, or form-data), and sender IP address.

2.3 Usage & Diagnostics Data

We gather aggregated telemetry regarding error rates, platform performance, browser user agents, and feature usage to maintain high platform availability.

2.4 Billing Information

For paid subscriptions, payment processing is handled directly by PCI-DSS certified payment processors. Probe does not store full credit card numbers or sensitive payment CVVs.

3. How We Use Information

We use collected information solely for legitimate operational purposes, including:

• Ingesting, parsing, formatting, displaying, and replaying webhook events in real time;
• Authenticating users and securing endpoints against unauthorized inspection;
• Providing technical support and diagnosing webhook delivery failures;
• Detecting, preventing, and mitigating abuse, spam, and denial-of-service attempts;
• Managing billing, subscriptions, and invoicing;
• Transmitting essential security alerts, maintenance notices, and system updates.

4. Webhook Payload Privacy & Encryption

Captured payloads are isolated to your workspace and accessible only to authorized members of your team.

We provide tools to redact sensitive authentication headers (such as Authorization, x-api-key, or stripe-signature) and payload fields before rendering. Probe personnel do not inspect user payload contents unless explicitly requested by you for debugging support or mandated by lawful court order.

5. Data Retention & Automatic Expiration

Probe operates on an ephemeral lifecycle. Webhook payloads are retained only for the window designated by your plan (e.g., 24 hours on free tiers, or up to 30 days on paid tiers).

When a payload reaches the end of its retention period, background workers permanently purge the data from our storage and caches. You can also trigger immediate manual purging of individual requests or complete endpoints at any time.

6. Data Security Measures

We implement comprehensive organizational and technical security controls:

• In Transit: Enforced TLS 1.3 encryption across all web interfaces, APIs, and webhook ingestion endpoints;
• At Rest: AES-256 encryption for database records, payload bodies, and backup archives;
• Access Controls: Role-based access controls, multi-factor authentication, and strict least-privilege administrative policies;
• Monitoring: Continuous security monitoring, vulnerability scans, and automated intrusion detection.

7. Information Sharing & Third Parties

We do not sell or trade your data. We disclose information only under strict conditions:

• Infrastructure Subprocessors: Cloud hosting, database, and telemetry providers bound by data protection agreements;
• Payment Gateways: PCI-DSS certified payment processors handling subscriptions;
• Legal Obligations: When strictly required by applicable law, court order, or governmental subpoena;
• Security Protection: When necessary to protect platform integrity, user security, or legal rights.

8. International Data Transfers

Probe operates distributed infrastructure across multiple regions. When data is transferred internationally, we implement recognized safeguards, including Standard Contractual Clauses (SCCs), to protect personal data.

9. Your Rights & Data Control

Under applicable data protection laws (such as GDPR and CCPA), you have the right to:

• Access, review, and request a copy of your personal data;
• Rectify inaccurate or outdated account information;
• Request complete erasure of your account, endpoints, and captured payloads;
• Export your data in standard JSON format;
• Object to or restrict specific data processing activities.

10. Cookies & Local Storage

We use essential session cookies necessary for user authentication and anti-CSRF protection. We utilize browser Local Storage strictly for remembering user interface preferences (such as light/dark mode and sidebar states). We do not use third-party advertising cookies or cross-site tracking pixels.

11. Children's Privacy

Probe is designed for developers and professional software teams. The Platform is not directed to children under 16 years of age, and we do not knowingly collect personal data from minors.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When modifications occur, we will update the "Last updated" date and notify users of material changes via email or dashboard announcements.

13. Contact & Data Protection Inquiries

If you have any questions, privacy concerns, or wish to exercise your data protection rights, please contact our team:

Probe Privacy & Security Team
Website: https://probe.monobase.io.vn