Privacy Policy

Last updated: October 9, 2026

1. Who we are

Zenhook is operated by Solar Beam Studio. Our service lets you receive real-time notifications from your applications via webhooks. This policy explains what data we collect, why, and how we protect it.

2. Data we collect

Account information

  • Name (first and last), email address
  • Password (hashed, we never store or see your plain-text password)
  • Profile picture (optional)
  • Google account data if you sign in with Google (name, email, profile image)

Workspace and team data

  • Workspace name and logo
  • Team member emails and roles (when you invite members)
  • Your answer to “How did you first hear about Zenhook?”, if you answer

Webhook and alert data

  • Webhook payloads you send to Zenhook (alert title, message, fields, metadata, severity level, links)
  • Source IP address and user agent of incoming webhook requests

Monitor data

  • URLs you configure for uptime monitoring
  • Check results (status codes, response times, error messages)

Device and session data

  • Device tokens for push notifications (iOS and Android)
  • Session IP address and user agent (for security)
  • Cookies for authentication and workspace context

In-app activity

We record returns to the foreground, notification opens and Insights opens to understand product usage. These events include their date, platform, app version and identifiers for the account, workspace or channel involved. They do not include alert text or search queries. If the app cannot load your alerts, it tells us once the connection is back, with the kind of failure (connection, timeout, server error), never its text, so that we can fix it.

Billing data

  • Stripe customer and subscription identifiers, we do not store your credit card number or payment details. All payment processing is handled by Stripe.

3. How we use your data

  • Deliver alerts and notifications you configure
  • Authenticate you and secure your account
  • Process payments and manage your subscription
  • Send transactional emails (workspace invites, payment failures, monitor alerts)
  • Monitor uptime of URLs you configure
  • Enforce plan limits and usage quotas

We do not sell your data, use it for advertising, or share it with data brokers.

4. Third-party services

We use the following third-party services to operate Zenhook:

When you send Zenhook data about other people, or plug a website with Analytics, you decide that processing and we carry it out for you: see the data processing agreement.

5. Data storage and security

  • Data is stored on servers located in Finland (EU)
  • All connections are encrypted with TLS (HTTPS)
  • Passwords are hashed using bcrypt
  • API tokens are stored encrypted and can be revoked at any time
  • iOS credentials are stored in the device Keychain

6. Data retention

  • Alerts are retained for as long as your account is active
  • Monitor check history is retained for 7 days
  • When you delete your account, all associated data (alerts, channels, workspace data) is permanently deleted

7. Your rights

You can at any time:

  • Access and export your data
  • Update or correct your account information
  • Delete your account and all associated data
  • Revoke API tokens and device registrations
  • Opt out of email notifications in your settings

If you are located in the EU, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

8. Cookies

We use strictly necessary cookies for authentication (session token) and workspace context (active workspace). We do not use analytics cookies, tracking cookies, or advertising cookies.

Audience measurement, without cookies: this site counts its visits with Pirsch (Germany) and with Zenhook Analytics, our own service (Hetzner, Finland): the page, the referring site, the country, the device and the browser. Your IP address is never stored; with your browser it gives a fingerprint that changes every day. Visits are kept 13 months. Browsers that send Global Privacy Control or Do Not Track are not counted by Zenhook Analytics.Stop counting my visits on this site.

Visit recording, with your agreement: if you accept the bar, Zenhook Analytics records your visit to this site to help us improve it: what shows on the screen, your clicks and your scrolling. What you type in a field is never sent. No cookie is set; your answer is kept in your browser. Recordings are hosted by Hetzner (Finland), kept 30 days, and are not used for advertising. With no answer, or after a refusal, nothing is recorded. To withdraw your agreement, use the link above.

9. Children

Zenhook is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through the app. Continued use of Zenhook after changes constitutes acceptance of the updated policy.

11. Contact

For any questions about this privacy policy or your data, contact us at [email protected].