Terms of use

These terms cover use of https://webhookmill.com, operated by Media Yard LLC, PO Box 73, Pennsauken, NJ 08110. Contact hello@webhookmill.com. By creating an account, calling the API, or using the dashboard or customer portal, you agree to them. Privacy, the DPA, How we use AI, and the Acceptable Use Policy are part of this agreement.

The service

Webhookmill is outbound webhook delivery for indie SaaS. You name HTTPS endpoints and signing secrets, POST events with a type, payload, and optional idempotency key, and we HMAC-SHA256-sign the body, deliver it, retry failed attempts on a published backoff, and keep a delivery log — including a customer portal for the endpoint token you share.

Webhookmill is not an inbound “receive webhooks” product, not a generic message queue, not Zapier, not email, and not SMS. Delivery is best-effort with retries. We do not warrant multi-region availability or that every destination will accept your POST.

Plans and caps

Access is self-serve. Starter is $0. Pro is $49 per month. Scale is $149 per month. Pricing on the homepage wins if a number here is stale. Paid plans are billed through Stripe Checkout in US dollars and renew until you cancel. Caps (events, endpoints, event types, log retention, rate limits, retry attempts) are stated on the site and enforced in the product. We may tune caps; material reductions will be posted and, where we have an account email, emailed.

Starter needs no card. Pro and Scale bill monthly. Fees already paid are not refunded except where the law requires. Failed payments may pause paid-plan features.

Accounts and keys

Magic-link email is how you sign in. You must be 18 or older. API keys are secret credentials. Do not commit them. Rotate them if they leak. We store a hash of API keys for lookup. Signing secrets are stored so we can sign deliveries; rotate them from the customer portal if a destination is compromised.

You are responsible for people you invite, endpoints you configure, payloads you enqueue, and destinations you target.

Your customers and payloads

You are the controller of event payloads and customer endpoint data you enqueue. Media Yard LLC is the processor for that pile under the DPA. Do not send secrets you would not put on a wire. Do not enqueue unlawful content or personal data you have no right to send. The customer portal shows delivery history and endpoint health for the endpoint token you share — you control who gets that token.

Who owns what

You keep the payloads, endpoint configuration, and delivery history that belong to you. Media Yard LLC owns Webhookmill — the product, software, site, API, and marks. You get a limited license to use the service while you follow these terms.

Acceptable use

Use is also governed by the Acceptable Use Policy at /aup. Rate limits are part of the product, not a courtesy. In short:

• Do not use Webhookmill to probe, flood, or credential-stuff third-party hosts.
• Do not enqueue payloads you do not have a right to send.
• Do not target endpoints that did not opt in to receive your events.
• Do not use the service for malware, phishing, or deceptive loops.
• Do not evade rate limits, retries, or signatures to hide origin.
• Do not probe, scrape, overload, or reverse-engineer the product.

We may disable keys, endpoints, or accounts that break this section or the AUP. Serious abuse may be reported to the destination operator or to law enforcement.

Cancel and close

Cancel a paid plan from Settings or by writing hello@webhookmill.com. Cancel stops new paid charges at the end of the current billing period unless Settings says otherwise. The account and delivery history stay unless you ask us to erase them.

Write hello@webhookmill.com from the account email to close the account and erase account and delivery data we still hold for the plan retention window. Invoice and tax records stay as the law requires. Backups age out.

We may suspend or close an account that breaks these terms, the AUP, looks abusive, or that we are required by law to stop serving. Ownership, amounts already due, liability, indemnity, confidentiality, New Jersey law and venue, and this survival language last after cancel or close.

Export

Write hello@webhookmill.com from the account email to ask for a copy of account configuration and delivery history we reasonably hold. Plan retention windows still apply to delivery logs (7 / 30 / 90 days).

Export and sanctions

You may not use the service if United States export-control or sanctions rules forbid it, including if you are on a US denied-party list or in a comprehensively sanctioned jurisdiction.

Confidentiality

Each side keeps the other's non-public business information confidential except as needed to run the service, comply with law, or with written permission. That includes your payloads and endpoint configuration, and our non-public product details.

Data protection

Where UK GDPR, EU GDPR, or similar law applies to event payloads and customer endpoint data you enqueue, you are the controller and Media Yard LLC is the processor — or, if you yourself process that data on behalf of another controller, you are the processor and we are the sub-processor. The DPA is incorporated by using the service. You do not need a wet signature for it to apply. Email hello@webhookmill.com from the account email if you need a countersigned copy.

No SLA

There is no service-level agreement and no service credit. Support is email to hello@webhookmill.com, best effort.

AS-IS and limitation

The service is provided as-is and as available. To the extent the law allows, Media Yard LLC disclaims warranties of merchantability, fitness for a particular purpose, and non-infringement, and is not liable for lost profits, lost data, failed deliveries at a destination you chose, or indirect damages. Aggregate liability for a claim relating to the service will not exceed the fees you paid us in the three months before the claim (zero on Starter). Nothing here limits liability for death, personal injury, or fraud, or any right that UK or EU law will not let a business exclude, or a data subject’s rights under the Standard Contractual Clauses in the DPA. Some jurisdictions do not allow certain limits; those limits apply to the fullest extent allowed.

Your indemnity

You will defend Media Yard LLC against a third-party claim that arises from the payloads you enqueue, the endpoints you target, or your customers’ use of the portal token you share, and will pay damages finally awarded, if we give prompt notice and let you control the defense.

Changes

We may change these terms by dating this page and, for a material change, emailing the account if we have one. Keep using after that notice is acceptance. If you do not agree, stop using Webhookmill and cancel the plan.

Assignment

You may not assign these terms without our written consent. We may assign them to an affiliate or a buyer of the business.

New Jersey law and venue

These terms are governed by the laws of the State of New Jersey, without regard to conflict-of-law rules. Courts in New Jersey are the venue. If a court will not enforce a part, the rest still stands. Where the DPA’s Standard Contractual Clauses give data subjects an Ireland forum, that forum is not overridden for those claims.

No lawyer on staff

Media Yard LLC has no lawyer on staff. These pages are operator drafts. Nothing on webhookmill.com is legal advice.

Contact

Media Yard LLC, PO Box 73, Pennsauken, NJ 08110 · hello@webhookmill.com