This policy explains what personal information Hookly collects, how we use it, who we share it with and the choices you have. Hookly is operated by [Company legal name], the controller of your personal information.
Information you give us
Account details (name, email, sign-in method), the brands and handles you add, your answers during onboarding (niche, audience, goals, website), reference creators you choose, and the ideas, scripts and carousels you create or edit. Billing details are entered on Stripe; we receive the plan, status and the last four digits of your card, never the full card number.
Information from Instagram and TikTok
When you paste a public handle we read publicly available profile information and posts. When you connect through the official Instagram or TikTok login, and only with the permissions you approve, we receive your profile information and media with their metrics (for example views, reach, likes, comments, saves and shares). We use this data only to build your strategy, ideas and insights inside Hookly. We do not sell it, use it for advertising, or share it with other users. Access tokens are stored encrypted, and you can disconnect at any time.
Information from Google sign-in
If you sign in with Google we receive your name, email address and profile picture. Hookly’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Information collected automatically
Device and browser information, pages and features used, and approximate location from IP address, through essential cookies and product analytics. We use these to keep the service secure, fix problems and understand which features help creators.
How we use information
To provide and personalise the service, generate content with AI, show insights, process payments, send service emails (such as login links and reminders about an unfinished setup), provide support, keep Hookly secure, and comply with law. We use aggregated, de-identified statistics to describe how Hookly is used.
AI processing
Your inputs and connected-account data are sent to our AI model providers to generate outputs for you. They process this data on our behalf under contracts that prohibit using it to train their models.
Retention
We keep your information while your account is active. When you delete your account we delete your personal information and connected-account data within 30 days, except where we must keep records for legal, tax or fraud-prevention reasons. Backups are cleared on their regular cycle.
Your choices and rights
You can access, correct, export or delete your information, and disconnect Instagram or TikTok, from Settings or by contacting us. Depending on where you live, including California (CCPA/CPRA) and the EU/UK (GDPR), you may have rights to know, access, correct, delete, port, restrict or object to processing, and to appeal our decision. We will not discriminate against you for exercising these rights. See Data deletion for step-by-step instructions.
Security
We use encryption in transit and at rest, access controls and regular reviews. No system is perfectly secure; tell us about any concern at [security@hookly.app].
International transfers
Hookly is based in the United States and uses providers that may process data in other countries, with safeguards such as Standard Contractual Clauses where required.
Children
Hookly is not intended for anyone under 18, and we do not knowingly collect information from children.
Changes to this policy
We will post updates here and notify you of material changes by email or in the app.
Contact
Privacy questions or requests: [privacy@hookly.app], [Company legal name], [Postal address].