Privacy policy
Last updated: June 2026
Who we are
Deadletter. is operated by Kovva from the Netherlands. For privacy questions, contact support@deadletter.kovva.io. See also our terms of service.
What we collect
- Account information (email address) when you sign up
- Webhook payloads, headers, and delivery metadata you route through the service
- Billing information processed by Paddle (we do not store card numbers)
- Basic usage data (event counts per month)
How we use it
We use your data to receive, store, forward, retry, and alert on webhook deliveries. We do not sell your data. We do not use webhook payloads for advertising or model training.
Retention
Events are retained for 7 days on the Free plan and 30 days on Pro, then automatically deleted. You can delete your project and all associated data at any time from Settings.
Cookies
We use strictly necessary session cookies to keep you signed in (via Supabase Auth). We do not use analytics, advertising, or tracking cookies. If we add non-essential cookies in the future, we will ask for your consent first.
Sub-processors
- Supabase (database and authentication)
- Vercel (hosting)
- Paddle (billing and tax as merchant of record)
- Resend (email alerts)
Your rights
You may request access to or deletion of your account data by emailing support@deadletter.kovva.io. If you are in the EU, you have rights under GDPR including access, rectification, erasure, and portability.