1. Introduction
This Privacy Policy explains how Formatted Webhooks ("we", "us", or "the Service") collects, uses, and protects your personal information. By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Password (encrypted)
- Account creation date
2.2 Fourthwall Integration Data
When you connect your Fourthwall shop, we collect and store:
- Fourthwall shop ID
- Shop name and domain
- Shop logo URL
- OAuth access and refresh tokens (encrypted)
- Token expiration timestamps
2.3 Webhook Configuration
For each webhook you create, we store:
- Discord webhook URL
- Logo preferences
- Embed color customization
- Selected event types
- Webhook creation and update timestamps
2.4 Usage Data
We automatically collect:
- Webhook event types received
- Delivery status codes
- Request timestamps
- Error logs (for debugging)
2.5 Technical Data
We may collect:
- IP addresses (for security)
- Browser type and version
- Device information
- Access times
3. How We Use Your Information
We use the collected information to:
- Provide the Service: Format and deliver webhook notifications
- Maintain Connections: Keep your Fourthwall integration active
- Improve Service: Analyze usage patterns and fix issues
- Security: Detect and prevent abuse or unauthorized access
- Communication: Send service-related notifications
- Compliance: Meet legal obligations
4. Data Storage and Security
Security Measures:
- All sensitive data is encrypted at rest
- OAuth tokens are stored securely with encryption
- Database access is restricted to service roles
- HTTPS encryption for all data transmission
- Regular security updates and monitoring
We use Supabase for data storage, which provides enterprise-grade security and infrastructure. However, no method of transmission or storage is 100% secure.
5. Data Sharing and Disclosure
We do NOT sell your personal information. We may share data only in these circumstances:
- With Fourthwall: OAuth tokens are used to access Fourthwall's API on your behalf
- With Discord: Webhook events are delivered to your Discord webhook URLs
- Service Providers: Hosting and infrastructure providers (Vercel, Supabase)
- Legal Requirements: If required by law or to protect our rights
- With Your Consent: Any other sharing will require your explicit permission
6. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Revoke Access: Disconnect your Fourthwall shop at any time
- Data Portability: Request your data in a portable format
- Opt-Out: Unsubscribe from non-essential communications
7. Data Retention
We retain your data:
- Active Accounts: As long as your account is active
- After Deletion: Up to 30 days for backup purposes
- Logs: Usage logs are retained for 90 days
- Legal Requirements: Longer if required by law
8. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences
- Analyze service usage
You can control cookies through your browser settings. Disabling cookies may limit functionality.
9. Third-Party Services
Our Service integrates with third-party platforms:
- Fourthwall: See their Privacy Policy
- Discord: See their Privacy Policy
- Supabase: Database and authentication provider
- Vercel: Hosting infrastructure
We are not responsible for the privacy practices of these third parties.
10. Children's Privacy
The Service is not intended for users under 13 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.
11. International Data Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- Sending an email notification (for material changes)
Continued use of the Service after changes constitutes acceptance.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our support email, fourthwall@ilora.xyz.
14. Your California Privacy Rights
California residents have additional rights under CCPA:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access and delete personal information
- Right to non-discrimination for exercising privacy rights
15. GDPR Compliance (EU Users)
For EU residents, we comply with GDPR:
- We process data lawfully and transparently
- Data is collected for specific purposes only
- We minimize data collection to what's necessary
- Data is kept accurate and up to date
- Data is stored only as long as necessary
- Data is processed securely
Last Updated: November 30, 2025