Data Processing Addendum

Last updated 2026-08-31. Standard terms for the RSS-to-Telegram service.

Scope and roles

This addendum applies when Hookferry processes personal data in feed content or customer configuration on a customer's behalf. The customer is the controller and Hookferry is the processor for that processing. It lasts for the subscription term and the limited deletion period described below.

Subject, purpose, and data

Hookferry polls the public feed URLs selected by the customer, summarizes new items, and sends results to the Telegram destination selected by the customer. Data can include customer account details, Telegram destination identifiers, feed URLs, feed author names, titles, links, and article text. Data subjects can include the customer, its users, feed authors, and people mentioned in feed content.

Customer instructions

Hookferry will process personal data only to provide, secure, support, and maintain the service according to the customer's configuration and these terms, unless applicable law requires otherwise. The customer is responsible for having authority and a lawful basis to submit the selected feeds, destinations, and data.

Confidentiality and security

Subprocessors

The customer generally authorizes the providers listed at /subprocessors. Hookferry will update that list before adding a provider that processes customer data and will provide additional notice where required. Hookferry remains responsible for its obligations under this addendum when using subprocessors.

Requests, incidents, and assistance

Taking into account the nature of the service and information available, Hookferry will reasonably assist the customer with data-subject requests, security inquiries, and legally required impact assessments. Hookferry will notify affected customers without undue delay after confirming a personal-data breach involving their Hookferry data and will provide information reasonably available to support required notices.

Retention and deletion

Feed content is processed transiently. Active account configuration and subscription state are retained while needed to provide the service. After termination, Hookferry will delete or render inaccessible customer configuration within 30 days unless retention is required for security, dispute, tax, or legal reasons. Stripe and Telegram retain information under their own terms.

International processing

Subprocessors may process data outside the customer's country. Their contractual transfer mechanisms and data terms apply. Customers that require specific Standard Contractual Clauses, a transfer assessment, data localization, or negotiated terms should contact Hookferry before subscribing.

Information and audit

On reasonable written request, Hookferry will provide available information needed to demonstrate the controls described here. Given the service's size, remote documentation review is the standard method. Any broader audit must be legally required, proportionate, protect other customers and system security, and be agreed in advance.

Contact

Privacy and data-processing questions: [email protected].