Terms of Service

These Terms of Service (the "Terms") govern your use of the Sigvane website at sigvane.com and the hosted webhook ingestion service at api.sigvane.com (together, the "Service"). The Service is operated by Andrejs Cernikovs (see Impressum). By signing in or otherwise using the Service, you agree to these Terms.

1. The Service

Sigvane receives webhook requests from external providers, verifies their signatures, stores accepted requests, and may extract limited metadata from those requests as needed to categorize, index, and serve them through the Service. Sigvane does not interpret webhook payloads beyond what is necessary to operate the Service.

The Service is currently provided free of charge. Concrete limits such as the maximum number of inboxes, request size, and retention window may be enforced by the Service and may change over time.

2. Account and access

You sign in with a GitHub account. Your relationship with GitHub is governed by GitHub's own terms and is not part of this agreement.

You are responsible for activity under your account, including the use of your API keys. Keep your API keys secret. If you believe a key has been compromised, revoke it and create a new one.

3. Acceptable use

You agree not to:

• use the Service for unlawful purposes or to transmit unlawful content;
• use the Service in a way that violates the terms of a provider you integrate with;
• attempt to bypass authentication, limits, retention, or other enforcement mechanisms of the Service;
• probe, scan, or interfere with the normal operation of the Service without prior permission;
• use the Service to distribute malware or attack third parties;
• resell or repackage the Service without prior written consent.

4. Your data and configuration

The Service stores webhook payloads sent by providers you configure. You are responsible for your configuration and for ensuring that you are allowed to send, receive, store, and retrieve those payloads.

You are also responsible for ensuring that your use of the Service complies with applicable data-protection and other laws, especially if webhook payloads contain personal data.

You grant us the limited right to process, store, display, delete, and extract limited metadata from those payloads as needed to operate the Service.

5. Availability and changes

The Service is provided on an "as available" basis. We do not offer a service-level agreement, guaranteed uptime, or guaranteed response times.

Webhook delivery is at-least-once. This means duplicate payloads may occur as part of normal operation.

We may add, modify, suspend, or discontinue any part of the Service at any time.

6. Termination

You may stop using the Service and delete your account at any time.

When you delete your account, associated data is scheduled for deletion immediately and is usually removed right away, but may take up to 24 hours to complete.

We may suspend or terminate access if you breach these Terms, if your use creates risk to the Service or other users, or if we are required to do so by law.

7. No warranty

To the maximum extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, whether express or implied.

8. Liability

To the maximum extent permitted by law, we are not liable for damages arising from your use of, or inability to use, the Service.

This limitation does not apply where liability cannot be excluded under applicable law, including for intent, gross negligence, injury to life, body, or health, and claims under the German Product Liability Act (Produkthaftungsgesetz).

You are responsible for your own backups and for designing your workflow so that occasional failures, delays, or duplicate deliveries do not cause material harm.

9. Data processing on your behalf (Art. 28 GDPR)

To the extent webhook payloads processed through the Service contain personal data for which you are the controller, Sigvane acts as your processor for that data.

9.1 Scope of processing

Sigvane processes personal data contained in webhook payloads only for the purpose of receiving, verifying, storing, categorizing, indexing, and making those payloads available to you through the Service.

The processing lasts for as long as you use the Service and until the applicable retention period expires or the relevant data is deleted. The categories of data subjects and personal data depend on the payloads sent by the providers you configure and may include usernames, display names, email addresses, commit metadata, event references, and other data contained in raw webhook payloads.

9.2 Instructions and confidentiality

Sigvane processes such personal data only on your documented instructions, as reflected in these Terms and in the configuration you apply when using the Service, unless otherwise required by applicable law.

Sigvane ensures that persons authorised to process such personal data are subject to appropriate confidentiality obligations.

9.3 Security and assistance

Sigvane applies appropriate technical and organisational measures designed to protect such personal data, including access controls, transport encryption, protection of stored secrets, and limited retention.

Taking into account the nature of the processing, Sigvane will assist you as reasonably necessary in responding to requests relating to data-subject rights and in meeting your obligations under Articles 32 to 36 GDPR.

Sigvane will notify you without undue delay after becoming aware of a personal data breach affecting such data.

9.4 Sub-processors and international transfers

You grant general authorisation for Sigvane to use sub-processors involved in operating the Service. The current providers and sub-processors are listed in the Privacy Policy. Sigvane will inform you before engaging a new sub-processor.

Where personal data is transferred outside the European Economic Area, Sigvane will use an applicable transfer mechanism required by law.

9.5 Deletion and compliance information

Personal data contained in webhook payloads is deleted when the applicable retention period expires, when the relevant inbox is deleted, or when your account is deleted. Account deletion triggers deletion of associated data, which usually happens immediately but may take up to 24 hours to complete.

Sigvane will make available information reasonably necessary to demonstrate compliance with this section. To the extent required by applicable law, Sigvane will also allow and contribute to audits or inspections by you or an auditor mandated by you, provided that such requests are reasonable, proportionate, and do not unreasonably interfere with the operation or security of the Service.

10. Privacy

Information about how we handle personal data is described in our Privacy Policy.

11. Changes to these Terms

We may update these Terms from time to time. The latest version will be published on this page. If we make material changes to section 9, we will provide notice before those changes take effect. By continuing to use the Service after the changes take effect, you agree to the updated Terms.

12. Governing law

These Terms are governed by the laws of the Federal Republic of Germany, to the extent permitted by applicable law. If you are a consumer with your habitual residence in another country of the European Union, the mandatory consumer-protection provisions of that country remain unaffected.

13. Contact

For questions about these Terms, write to contact@sigvane.com.