Terms of Service

1. The Service

subhook is a SaaS platform that ingests inbound emails forwarded to a unique <slug>@inbox-subhook.digitalcraftworkshop.com address and re-emits them as HTTP webhook calls to user-configured API endpoints. The service is provided "as is" during the beta phase.

Beta program: subhook is currently in beta. Features may change, be removed, or behave unexpectedly. Beta users accept that the service may be unstable and that data loss, while unlikely, is possible.

2. Accounts

• You must provide accurate information when creating an account.
• You are responsible for maintaining the security of your account credentials and the API tokens you configure on your mailhooks.
• You must be at least 16 years old to use subhook.
• One person or legal entity may not maintain more than one free account.
• You are responsible for all activity under your account.

subhook reserves the right to suspend or terminate accounts that violate these Terms.

3. Acceptable Use

You agree not to use subhook to:

• Forward unsolicited bulk email, spam, phishing, or messages from senders who have not authorised the forwarding
• Re-emit malware, exploit payloads, or any harmful content to third-party APIs
• Violate any applicable laws or regulations (including CAN-SPAM, GDPR, CASL, anti-fraud, and computer-misuse laws)
• Impersonate any person or entity
• Attempt to gain unauthorised access to subhook's systems or other users' mailhooks
• Use the service to harm, harass, deceive, or surveil third parties
• Configure mailhooks that point at endpoints you do not own or are not authorised to receive traffic from
• Scrape or extract data from the platform beyond normal use

You are solely responsible for the content of emails routed through subhook, the destinations you configure, and for ensuring your use complies with all applicable laws in your jurisdiction.

4. Email Ingestion and Webhook Delivery

• subhook uses third-party email infrastructure (currently Postmark) to receive inbound mail at inbox-subhook.digitalcraftworkshop.com.
• subhook does not guarantee delivery of webhook calls. Factors outside our control — including endpoint availability, response latency, and authentication failures on your side — may cause individual deliveries to fail.
• Failed webhook deliveries are retried per Postmark's retry policy. Persistent failures result in the event being dropped.
• You must keep your API endpoint reachable, your bearer / custom header tokens valid, and your endpoint capable of returning a 2xx response within Postmark's timeout window.
• subhook reserves the right to throttle, suspend, or quarantine mailhooks with high failure rates, suspicious traffic, or signs of abuse.
• The full inbound email payload (headers, body, attachments metadata) is forwarded to your configured endpoint. Do not configure mailhooks that route sensitive third-party correspondence you are not authorised to share.

5. Beta Program

• Beta accessis offered at subhook's sole discretion and may be revoked at any time without notice.
• Beta access does not imply any specific feature set, uptime guarantee, or commercial commitment.
• Feedback provided during beta may be used to improve the service. You grant subhook a non-exclusive, royalty-free license to use any feedback you provide.
• Pricing and plans may be introduced at any time. Existing beta accounts will receive at least 30 days' notice before being moved to a paid tier or rate-limited.

6. Limits

During the beta the service is provided free of charge with the following soft limits per account:

• A reasonable number of mailhooks (no hard cap during beta)
• A reasonable inbound message volume per day
• Last 50 webhook deliveries retained per endpoint for debugging
• No SLA on uptime, throughput, or retry behaviour

subhook reserves the right to modify these limits at any time and to rate-limit accounts that exceed what one builder can reasonably consume.

7. Intellectual Property

• Your content: You retain ownership of the emails routed through subhook and the configuration you create (mailhooks, endpoint URLs, headers, custom rules). subhook is granted a limited license to store and process this content solely to provide the service.
• subhook's IP: The subhook platform — including its code, design, trademarks, and documentation — is owned by Daniel Rusnok. You may not copy, modify, distribute, or reverse-engineer any part of the platform.
• Inbound email content: The payload of an inbound email belongs to whoever lawfully sent or owns it. subhook routes it on your behalf based on the destination you configured; we do not claim any rights over it.

8. Data Processing and GDPR

subhook processes personal data on your behalf as a data processor. You are the data controller for the email content and any personal data inside it that flows through your mailhooks.

Data we collect about you (account holder):

• Name and email address (via Clerk authentication)
• Mailhook configuration (slug, destination URL, headers, tokens)
• Usage data (events received, deliveries attempted, failure counts)

Data we process on your behalf (inbound emails):

• Sender address, recipient slug, subject, body, and attachment metadata
• Webhook delivery audit log (status, response code, timestamp) for debugging

Data retention:

• Mailhook configuration is retained as long as your account is active.
• Webhook delivery logs (last 50 per endpoint) are retained for debugging and rotated automatically.
• Raw email payloads are not stored long-term — they are forwarded to your endpoint and discarded after retries are exhausted.
• You can delete a mailhook or your account at any time from the dashboard.

Your obligations under GDPR:

• You are responsible for ensuring you have a lawful basis to receive, process, and re-emit the inbound email content arriving at your slug.
• You must provide a privacy policy on your downstream service that discloses how forwarded data is processed.
• You must honor data-subject requests (access, deletion, rectification) for any personal data you ingest through subhook.

subhook's infrastructure:

• Hosting: Fly.io (multi-region)
• Database: Render.com (United States)
• Inbound email: Postmark (United States)
• Authentication: Clerk (United States)

Data transfers outside the EU are covered by standard contractual clauses or equivalent mechanisms where applicable.

Contact for data requests: danielrusnok@gmail.com

9. Limitation of Liability

To the maximum extent permitted by applicable law:

• subhook is provided "as is" without warranties of any kind, express or implied.
• subhook does not warrant that the service will be uninterrupted, error-free, or free of harmful components.
• subhook shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities arising from missed, delayed, or malformed webhook deliveries.
• subhook's total liability to you for any claim arising from use of the service shall not exceed the amount you paid for the service in the 3 months preceding the claim (or zero, if you are on a free / beta tier).
• These limitations apply regardless of the legal theory (contract, tort, strict liability, or otherwise).

10. Termination

• You may delete your account at any time from the dashboard. Deletion is permanent and removes all mailhooks and delivery logs.
• subhook may suspend or terminate your account immediately if you violate these Terms, engage in abusive behavior, or if required by law.
• Upon termination, your right to use the service ends immediately. Your data will be deleted within 30 days.

11. Changes to These Terms

subhook may update these Terms at any time. If changes are material, we will notify you by email at least 14 days before they take effect. Continued use of the service after changes take effect constitutes acceptance of the new Terms.

12. Governing Law

These Terms are governed by the laws of the Czech Republic. Any disputes shall be resolved in the courts of the Czech Republic, unless mandatory consumer protection laws in your country of residence provide otherwise.

13. Contact

For questions about these Terms, data requests, or anything else:

Daniel Rusnok
Email: danielrusnok@gmail.com
Website: subhook.digitalcraftworkshop.com