Privacy Policy

1. Data we collect

We collect only what we need to run the Service.

1.1 Data you give us

• Account data: email address, password hash, display name, avatar, workspace name.
• Workspace content: the social accounts you connect, the comments and direct messages you choose to have HookAlly process, reply drafts and templates, the brands, keywords and trends you track, brand-deal records, the videos, captions and drafts you upload for pre-publish checks, and your settings.
• Billing data: plan, order history and payment status. Card details go directly to Stripe — we never see or store them.
• Support data: anything you send us by email or through in-product feedback.

1.2 Data we collect automatically

• Device data: device type, operating system, browser and version, screen size, IP address.
• Log data: pages visited, timestamps, actions taken, time on page, error traces.
• Cookies and similar technologies: to keep you signed in, remember preferences and measure usage.

1.3 Data from third parties

If you sign in with Google or Facebook, we receive the identifier, email address, name and avatar those providers share with us. We do not receive your password from them.

1.4 Connected accounts

If you connect a social media account (for example a TikTok account) to HookAlly, we access only the data that the platform’s authorization grants and that you approve — such as your profile, your public videos and their metrics, and the comments and messages you choose to manage in HookAlly. We use that data only to provide the features you turn on, and we handle it in line with the platform’s terms and policies. You can disconnect an account at any time in HookAlly or in the platform’s own settings; after you disconnect, we stop collecting new data from it.

2. How we use it

• to create and secure your account and workspace;
• to deliver the Service — drafting and, where you allow it, sending replies to comments and direct messages, monitoring brand mentions and trends, managing brand deals, and running pre-publish policy checks on your videos;
• to process payments, manage subscriptions and credits, and handle support requests;
• to diagnose faults, prevent abuse and protect the Service;
• to send service notices, and — only if you opt in — product updates you can unsubscribe from at any time;
• to meet legal obligations.

Where the law requires a legal basis (for example under the GDPR), we rely on performance of our contract with you, our legitimate interest in operating and securing the Service, your consent where we ask for it, and compliance with legal obligations.

3. Sharing

We do not sell your personal data. We share it only with:

• Service providers who process data on our behalf under contract — hosting, object storage, email delivery, payment processing (Stripe) and product analytics;
• AI providers that process the text and media you submit to AI features — for example comments, messages, captions and video transcripts — to return results to you;
• Connected platforms — when you ask HookAlly to send a reply or message on your behalf, the content is delivered to the platform you connected;
• Your workspace members — other people you invite can see workspace content and member names;
• Authorities, where we are legally required to disclose;
• A successor entity, in a merger or acquisition, subject to this policy.

4. International transfers

We operate globally, so your data may be processed in countries other than your own. Where we transfer personal data out of a region with transfer restrictions, we use an approved mechanism such as the EU Standard Contractual Clauses.

5. Retention

We keep your data for as long as your account is active. When you delete your account, we remove your workspace and its content after the cooling-off period shown in the product, except where we must keep records longer for legal, tax or anti-fraud reasons. Backups age out on their own cycle.

6. Security

We use encryption in transit, hashed passwords, access controls and audit logging. No system is perfectly secure; if a breach affects your data we will notify you and the relevant regulators as required by law.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your personal data, to object to processing, and to withdraw consent. Much of this is available directly in account settings; for anything else, email privacy@hookally.com and we will respond within the period required by applicable law. You also have the right to complain to your local data protection authority.

8. Children

The Service is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

9. Changes

We may update this policy. We will change the “Last updated” date above and, for material changes, notify you in the product or by email before they take effect.

10. Contact

Questions or requests about your data? Email privacy@hookally.com.