Privacy Policy

• Account data: name, email address, password hash and authentication records, language preference, account settings, plan, subscription status, credit balance and usage limits. If you sign in with Google, we receive basic Google account information, such as your name, email address and Google account identifier.
• Library and preference data: hooks you save or remove, selected categories, search preferences, and interactions with the Viral Hook Library.
• Creator and public-content data: public creator usernames and profile identifiers, public posts and links, public engagement signals, and the creators you choose to monitor, mute, or stop monitoring.
• Video and AI-feature data: videos you upload for hook scoring (Virality Predictor); product photos, selected hooks, prompts, topics and the AI video model and settings you choose for AI video generation; related file metadata (such as duration and size); and the resulting scores, analysis results, hook drafts and generated videos. The Hook Editor runs in your browser and does not upload your video to Hookest.
• Newsletter and email data: email address, Trend Radar categories, creator-digest settings (on or off, daily or weekly, minimum importance), promotional-email preferences, subscription, consent and unsubscribe records, and delivery events such as sent, bounced, opened or clicked where those features are enabled. This includes email addresses entered in the newsletter sign-up form on the website.
• Billing data: plan, billing status, invoices, transaction, credit top-up and subscription records, and related information supplied by Stripe. Stripe handles payment-card details and card authentication such as 3D Secure; Hookest does not receive full card numbers and receives the subscription and transaction metadata needed for account features.
• Redemption and developer data: if you redeem a code bought from a partner such as AppSumo, the code, its platform and its redemption status; if you use the Hookest API, your API keys, webhook settings and API usage records.
• Support communications: your name and email, messages you send through the contact form or by email, attachments, our replies, and relevant account details (such as plan, billing status or recent service activity) used to answer your request.
• Technical, usage and measurement data: IP address, browser and device information, approximate location derived from IP (such as country, region and city), referral and campaign (UTM) parameters, cookie or pixel identifiers, timestamps, page views, clicks, scrolling, form submissions and other feature interactions, registration, login and payment events, the short session recordings described in section 4, and security or diagnostic records. When you are signed in, product analytics events are linked to your Hookest account ID, email address, plan and billing status.
• MCP connection data: the connected assistant and its registration details, authorization and access-token records, granted permissions, tools invoked, tool inputs, request time, authorization state and the Hookest information returned for a tool request. MCP security records are retained for 90 days.

Hookest also processes publicly available content and metadata from social platforms to provide its research library and creator-listening features. We collect only information reasonably needed for the features described here.

We use information to create and secure accounts; provide the hook library, saved collections, trend insights, creator monitoring and requested video or AI features; manage plans, credits and payments; deliver Trend Radar and account communications; provide support; respond to requests through connected AI assistants; measure website use and campaign conversions; prevent fraud and abuse; maintain the service; and meet legal obligations.

Product messages may include onboarding guidance and reminders based on service activity, such as reaching a plan limit, viewing an upgrade page or starting checkout. You can contact support at support@hookest.com or through the contact form on our website, including for billing, refunds or complaints. Privacy and account-deletion requests go to contact@hookest.com.

Where the GDPR or similar law applies, we rely on contractual necessity for requested services and essential account communications; legitimate interests for security, maintenance, troubleshooting and support, subject to your rights; consent for processing that requires it; and legal obligations where applicable. A product reminder that promotes a purchase is treated as marketing, even if triggered by account activity. Marketing messages follow the choices described in section 3. You may withdraw consent and object to processing based on legitimate interests as provided by applicable law.

Trend Radar is a weekly email with hooks from the categories you select. You can choose whether to receive it when you sign up, through the newsletter sign-up form, on the Trend Radar page in your Hookest account or through a connected assistant. If you monitor creators with Competitor Listening, you can also choose to receive a creator digest email. Subscribing to Trend Radar does not, by itself, give consent to promotional emails. We send offers, discounts and purchase-related reminders by email only if you have separately agreed to receive them. Declining promotional email does not prevent you from using your account or subscribing to Trend Radar.

You can turn Trend Radar on or off and choose its categories on the Trend Radar page in your Hookest account, use the unsubscribe link in Trend Radar emails, or ask a connected assistant. You can turn the creator digest email on or off in Competitor Listening or through a connected assistant. You can also ask us to stop Trend Radar, the creator digest, promotional messages or all of them by emailing contact@hookest.com. You can also object to the use of activity data for marketing. Essential account, security, billing and receipt messages serve separate purposes and may still be sent.

We process subscription, preference, consent and unsubscribe records to respect your choices and prevent unwanted messages. The retention periods and criteria are described in section 10.

We use the following cookies and similar technologies.

• Essential: a Supabase sign-in session cookie (up to 8 hours), hookest_lang (your language) and hookest_country (country derived from your IP address, 30 days). Stripe may set its own fraud-prevention cookies when payment features load.
• Analytics: Google Analytics, loaded through Google Tag Manager, and Mixpanel. Mixpanel automatically records page views, clicks, scrolling, form submissions and field changes, and links events to your account when you are signed in.
• Session recordings: when you open the payment, credit top-up or API plan window, Mixpanel records your activity on the page for up to 5 minutes, or until payment completes, so we can find problems in checkout. Text typed into form fields is masked under Mixpanel's default settings, and card details are entered in Stripe's own payment form. Recordings are kept for 30 days, Mixpanel's default retention period.
• Advertising measurement: the Tag Manager configuration includes Google Ads conversion tracking, Meta Pixel and TikTok Pixel. The website also loads the OpenAI Ads Measurement Pixel, which can set the __oppref (30 days) and __obref (365 days) cookies. These tools may receive page views and registration, login and payment events together with online identifiers.

At present, these analytics and advertising tools load when you open the website and do not wait for a cookie choice. You can block or delete cookies in your browser, use browser privacy features or content blockers, and use Google's opt-out add-on for Google Analytics. You can also object by emailing contact@hookest.com. The providers' own privacy notices apply to their processing. Mixpanel processes this data in the United States.

Hookest helps users find and analyze publicly available videos and monitor public creator accounts. We may process public usernames, profile identifiers, post links and metadata, engagement signals, and publicly available video information for hook discovery, content analysis, and competitor-listening features. This may include public captions and comments and aggregate text, emoji and emotion analysis of that content. Third-party content remains subject to the platform’s terms and the rights of its owners. Accessing or downloading a clip through Hookest does not grant permission to republish it or use it commercially.

When you submit a video, image, prompt or other material for an available feature, Hookest processes the content and file metadata to provide the requested score, analysis or generated content.

• Hook scoring (Virality Predictor): you upload an MP4 video (up to 40 MB) to Hookest file storage (files.hookest.com) through a one-time upload link. When you use a connected assistant, either you open the upload link yourself or, if you have shared the video with the assistant, the assistant uploads it to that link; a video you share in a chat is also received by the assistant provider under its own terms. Videos are not stored permanently: the file is kept while the analysis runs and is then removed. Your score and analysis results are saved in your account.
• AI video generation: you choose a hook, upload a product photo and pick an AI video model. Your photo, the selected hook, your prompt and settings are sent to a third-party AI video model provider to create the video. The models currently offered are Kling O3 and Kling 2.5 Turbo (models developed by Kuaishou), Wan 3.0 (a model developed by Alibaba) and Seedance 2.5 (a model developed by ByteDance). Requests may be checked by content moderation. Ready videos are kept for 30 days and then deleted.
• Hook Editor: runs entirely in your browser. Your video stays on your device and is not uploaded to Hookest.
• Hook writing: the topic and instructions you enter are processed by an AI model to generate hook drafts.

Uploaded source files, analysis results and saved drafts are separate data categories. A download link expiring does not mean that the underlying file has been deleted. Retention is addressed in section 10. You may request deletion through contact@hookest.com. The provider operating a connected assistant may also hold a separate copy of information it receives; its privacy terms and controls apply to that copy.

To connect an assistant, you sign in to Hookest and approve the connection on a consent screen (OAuth). The consent screen shows the permissions (scopes) the assistant requests, and nothing is shared until you approve. The connection receives only the scopes you approve. When the assistant calls a Hookest tool, Hookest receives the call's inputs and returns a result to the assistant. The assistant provider processes your request and the returned information under its own privacy terms and settings.

Depending on the tool, permissions and request, inputs can include search terms, filters, hook or creator references, preference changes, text topics and prompts, and video file details (duration and size). Results can include public hooks with engagement data and comment insights, including up to 10 quoted public comments; public creator profile information such as handles, names and follower counts; your plan, subscription status and remaining usage limits; saved hooks; monitored creators and signals; newsletter and digest preferences; generated text; clip download links (valid for 15 minutes) and upload links; and your video-analysis results. Connecting an assistant does not itself give Hookest general access to all of your conversations with that provider; any context included in a tool call is processed as part of that call.

Available tools may save or remove hooks, manage creator monitoring and notification preferences, change newsletter preferences, create text drafts, request an available clip link or start video analysis. Some actions change account data or consume quotas. MCP text generation and video analysis are separate from video-generation features offered elsewhere in the service. Review the requested action and its scope before proceeding.

You can see each connected app and disconnect it with its Disconnect button on the MCP page of your Hookest account (hookest.com/app/mcp, also linked from Settings), use the controls provided by your assistant, or ask us at contact@hookest.com to remove a connection. Revoking authorization concerns future access through that connection; it does not delete copies already received by the assistant provider. MCP security records are covered by section 10.

We share information for the purposes described in this policy with the following recipients. Website analytics and advertising-measurement services may receive technical identifiers and event data. Some recipients act as service providers; others, including a connected assistant provider, may process information under their own privacy terms and settings.

• AI assistants you connect: the request and Hookest tool results returned in response to it, as described above.
• Email and workspace services: Google Workspace for receiving and answering support messages; Resend for delivering service, newsletter and other email.
• Analytics: Mixpanel (United States) for product analytics, session recordings and performance measurement.
• Website and advertising measurement: Google Tag Manager for tag management, Google Analytics and Google Ads, Meta Pixel, and TikTok Pixel for traffic, campaign, and conversion measurement. These tags may receive page-view, registration, login, and payment-success events plus technical identifiers.
• OpenAI Ads measurement: the OpenAI Ads Measurement Pixel for campaign attribution and conversion measurement. Configured events include registration and subscription events; technical identifiers and related event information may be processed where measurement is enabled.
• Payments: Stripe for payment processing, billing status and subscription administration.
• Hosting, sign-in and database: Hetzner (Germany), which hosts Hookest's own servers; Vercel for the website; Supabase for authentication and the account database; Google for Google sign-in if you choose it. Other file-storage and infrastructure providers may process data needed to operate product features.
• AI providers: the third-party AI video model providers described in section 6 for AI video generation, and AI model providers involved in hook writing and video analysis where those features use them.

Information may also be disclosed when necessary to comply with law, protect users or Hookest, resolve disputes or carry out a corporate transaction, subject to applicable data-protection obligations.

Inolyzer LLC is based in the United States. Hookest's own servers are hosted in the European Union (Hetzner, Germany). Some service providers described in section 8, such as Mixpanel, Stripe, Google, OpenAI and the other advertising-measurement providers, process information in the United States or other countries. For transfers of personal data from the European Economic Area to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses and, where the recipient is certified, the EU-U.S. Data Privacy Framework. For transfers from the United Kingdom, we rely on the UK International Data Transfer Addendum to those clauses or the UK International Data Transfer Agreement, or the UK Extension to the Data Privacy Framework where the recipient is certified. You can request information about the safeguards relevant to your data at contact@hookest.com.

• Account data: retained to administer your active account and requested services. Account-deletion requests are assessed against any applicable legal retention duties and outstanding disputes.
• Saved hooks, preferences, creator-monitoring settings and saved analysis results: retained in connection with the corresponding account feature and your choices to keep, remove or request deletion of the information.
• Videos uploaded for hook scoring: kept while the analysis runs, then removed. Generated AI videos: 30 days after they are ready, then deleted. Hook Editor videos are not uploaded. Analysis results and hook drafts: kept with your account while it is active or until you ask us to delete them.
• Support emails and replies: 24 months after the conversation is closed.
• Email sending and delivery logs: 13 months.
• Promotional consent records: while you are subscribed and for 3 years after you unsubscribe.
• Newsletter and suppression records: retained to administer an active subscription, record a withdrawal and prevent further unwanted email. A minimal suppression record serves this purpose separately from email delivery logs and promotional consent evidence.
• MCP security logs: 90 days.
• Session recordings: 30 days in Mixpanel (Mixpanel's default retention period). Cookie lifetimes are listed in section 4.
• Billing records may be kept longer where required by tax, accounting, payment, or other applicable law.
• Other records, including public-library content, analytics and advertising events, are retained according to their purpose, continuing relevance, correction or deletion requests and applicable legal requirements. These criteria apply separately to active systems, backups and provider-held copies; removing an item from the interface is not the same as deleting every copy.

When the applicable retention purpose or period ends, information is deleted or anonymized unless a legal obligation or a specific need to establish, exercise or defend a legal claim requires further retention. Any retained information remains subject to purpose and access limits.

Depending on your location and applicable law, you may request access, correction, deletion, portability or restriction of your personal information, object to processing, withdraw consent, and complain to a relevant data protection authority. Withdrawal does not affect the lawfulness of processing carried out before it.

To access your data, receive a copy of it, correct it or delete your account, email contact@hookest.com. The account currently has no self-service deletion or data-export option, so these requests are handled by email. You can manage your subscription in Settings, Subscription; see and disconnect connected apps on the MCP page; turn Trend Radar on or off and choose its categories on the Trend Radar page; turn the creator digest email on or off in Competitor Listening; and manage saved hooks and monitored creators in Hookest or through a connected assistant. We may need information to verify your identity and understand your request. We respond within the period required by applicable law. A request to Hookest does not automatically remove copies held independently by a social platform or assistant provider.

We use reasonable technical and organizational safeguards, including encrypted connections and hashed passwords, and restrict account access. No internet transmission or storage method can be guaranteed completely secure. If a personal-data incident requires notice under applicable law, we will provide it as required.

Hookest is intended for creators, marketers, advertisers, and other professionals, and is not directed to children under 16. We do not knowingly collect personal information from a child under 16. If we learn that we hold such information, we will take steps to delete it.

We may update this policy when our service or data practices change. We will update the date above and provide notice of material changes where required by law.

• Company: Inolyzer LLC
• Address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States
• Privacy and account requests: contact@hookest.com
• Support: support@hookest.com