Privacy Policy

Last updated: March 2026

TDACRM Solutions ("we", "us", "our") operates WebhookGuard. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

• Portal domain — the Bitrix24 domain of your organization, collected on install.
• Bitrix24 user IDs and emails — collected when users access the app, used to manage permissions.
• OAuth tokens — Bitrix24 access and refresh tokens, stored encrypted, used to proxy API calls.
• Request logs — method, entity type, status code, IP address, and response time for every proxied request.
• Billing information — handled entirely by Stripe. We do not store card numbers.

2. How We Use Your Data

• To provide the proxy, rate limiting, and audit log features of WebhookGuard.
• To manage your subscription and billing via Stripe.
• To send transactional emails (plan upgrades, payment failures) if you have a paid plan.
• We do not sell your data to third parties.

3. Data Retention

• Request logs: retained for 7 days (Free), 30 days (Starter), 1 year (Pro/Enterprise).
• Portal and token data: retained while your account is active, deleted 30 days after uninstall on request.

4. GDPR Rights

If you are in the EU/EEA, you have the right to access, correct, or delete your personal data. To exercise these rights, contact us at [email protected].

5. Data Security

OAuth tokens are encrypted at rest using AES-256. All data in transit is encrypted via TLS. We use industry-standard PostgreSQL hosting with regular backups.

6. Third-Party Services

• Stripe — payment processing. Stripe Privacy Policy
• Bitrix24 — CRM platform integration. Your Bitrix24 data is governed by Bitrix24's privacy policy.

7. Contact

For privacy questions: [email protected]