Effective date: 26 October 2026
SolidHooks is a webhook platform that receives, verifies, stores and delivers webhooks for its customers. It is available at solidhooks.com and its dashboard at dash.solidhooks.com, together with the SolidHooks API (the "Service").
The Service is operated by Interstellar Labs Ltd, a company registered in the United Kingdom ("Interstellar Labs", "we", "us", "our"). We are the data controller for the personal data described in this policy. For any question about this policy or your data, contact us at legal@interstellarlabs.company.
This policy explains what personal data we collect, why we collect it, how we use, store, share and protect it, how long we keep it, and the choices and rights you have.
When you create an account we collect:
The names of organizations and projects you create, an organization logo if you upload one, the names, email addresses and roles of members you invite, and the API keys you create (we store only a hash of each key).
The core of the Service is storing and forwarding webhooks on your behalf. That means we store the requests sent to your SolidHooks sources (headers and body), the destinations you configure, and a record of every delivery attempt, including the response your destination returned. This content is chosen by you and the services that send you webhooks, and it may contain personal data. For this data, you are the data controller and we act as your processor, using it only to provide the Service to you.
Paid plans are billed through Stripe. Stripe collects your card details directly; we never see or store your full card number. We receive and store your Stripe customer ID, subscription status, plan, billing currency, and the billing address and tax ID you give Stripe, which are used to calculate tax.
When you sign in we record the IP address and browser user agent for each session, so you can review and revoke your active sessions and so we can detect suspicious activity. Our servers also keep operational logs and traces, which may include IP addresses and request details, to run, debug and secure the Service.
You can connect an app, such as Claude, to your account through the SolidHooks MCP server. When you do, we store a record of your consent, the tokens we issue to that app, and the project you choose for it to work in. The app receives the results of the calls it makes on your behalf, which can include your webhook data and your name and email address. We do not receive your conversations with the app.
If you email us, we keep the correspondence so we can respond and keep a record of what we agreed.
You can sign in to SolidHooks with your Google account or your GitHub account instead of a password. We request only the minimum access needed to sign you in.
openid, email and profile scopes. From these we receive your name (first and last name), your email address and whether Google has verified it, your profile picture URL, and your Google account ID.We do not request access to your Gmail, Google Drive, Google Calendar, contacts, GitHub repositories, or any other data in your Google or GitHub account.
This data is stored in our database alongside the rest of your account (see section 6) and is kept for as long as your account exists. We do not sell it, we do not use it for advertising, and we do not share it with anyone except the service providers listed in section 5, who process it only to run the Service. If you delete your account, it is deleted with the rest of your account data. You can also remove SolidHooks' access at any time from your Google account settings or your GitHub application settings.
SolidHooks' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
Under UK and EU data protection law (the UK GDPR and the EU GDPR) we must have a legal basis for each use of your personal data:
We do not send marketing emails, we do not sell personal data, and we do not use personal data for advertising or profiling.
We share personal data only with the service providers we need to run the Service, under contracts that require them to protect it and use it only on our instructions:
We send email from our own mail server, which we operate ourselves on our own infrastructure; no third-party email provider receives your email address or the content of our emails to you.
We deliver webhooks to the destination URLs you configure. That is the purpose of the Service: the webhook content you choose to route is sent to those destinations on your instructions.
Apps you connect through the SolidHooks MCP server receive the data their calls return, on your instructions. What they do with it is governed by their own privacy policies.
We may also disclose personal data if the law requires it, to protect our rights or the safety of others, or to a buyer if Interstellar Labs or the Service is sold or merged, in which case this policy will continue to apply to your data.
Your data is stored in the United Kingdom, in DigitalOcean's London region. Some of our service providers, such as Stripe, may process data outside the UK. Where that happens we rely on an adequacy decision or on standard contractual clauses (the UK International Data Transfer Agreement or Addendum) to make sure your data stays protected.
Under UK and EU data protection law you have the right to:
You can update your name and profile, and review and revoke your sessions and the apps you have connected, at any time in your account settings. To delete your account and its data, or to exercise any other right, email us at legal@interstellarlabs.company. We may need to confirm your identity first, and we will respond within one month.
If your personal data reached us inside a webhook sent by one of our customers, please contact that customer first, as they control that data. We will help them respond to you.
We use only the cookies needed to make the Service work: cookies that keep you signed in, protect sign-in and two-factor flows, and remember basic preferences such as your language and theme. We do not use advertising cookies, and we do not use third-party analytics or tracking cookies. Because these cookies are strictly necessary, they do not require consent.
The Service is for businesses and developers and is not directed at children. You must be at least 18 to create an account, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
We may update this policy from time to time. When we do, we will change the effective date at the top of this page, and if the change is significant we will tell you by email or in the dashboard before it takes effect.
Interstellar Labs Ltd, United Kingdom
Email: legal@interstellarlabs.company