Privacy Policy

What we collect

• Your account. Your email address and, if you sign in with Google, your name and profile picture. If you use a password, we only keep a scrambled version of it (a one-way hash), never the password itself.
• What you make and upload. Your channels and topics, briefs, scripts, videos, photos, clips, audio, products, brand kit, characters and settings. This lives in your own private workspace.
• Keys you save. API keys for AI and media services you choose to connect. We lock them with encryption, use them only to run your own work, and never show more than the last four characters.
• Connected social accounts. If you connect a platform like YouTube or TikTok, we keep the access it gives us (locked with encryption), your account name, and the numbers on posts Hookline made for you (views, likes, comments, shares, saves).
• Voice recordings. If you record your own voice or clone a voice, we keep the recording and the spoken consent line it must include.
• Basic technical data. Your IP address and request times, kept briefly in server logs to stop abuse and fix problems.

How we use it

• To run the service: sign you in, keep your workspace, research trends, write and render your content, and post it where you told us to.
• To keep it safe: limit abuse, check text before it is turned into a voice, and stop content that breaks our rules.
• To send you account emails, like sign-in links, email confirmations and password resets. We don't send marketing email without asking.
• To improve Hookline for you, for example learning which of your own hooks did well so the next ones are better. Your workspace data is used for your workspace only.

Who else sees it

We use a few outside services to run Hookline. Each one only gets what it needs for its job.

• Hosting: Railway runs our servers and database.
• Email: Resend delivers our account emails.
• Sign-in: Google, if you choose "Continue with Google."
• AI and media services you connect, such as Anthropic, OpenAI, Google Gemini, OpenRouter, DeepSeek, ElevenLabs and fal. When you use your own key or your own Claude or ChatGPT account, your prompts and files go to that service under your account and its own privacy terms.
• Safety check: text that will be read aloud is checked with OpenAI's free moderation tool before any voice is made.
• Research sources: public data from YouTube, Google Trends, Hacker News, Product Hunt and similar sources. We send search words, not your personal details.
• Social platforms you connect, when you post or when we read the numbers on your own posts.

We may also share information if the law requires it, or to protect people from harm. If Hookline is ever sold or merged, your data would move with it under this same policy, and we would tell you first.

YouTube and Google data

Hookline uses YouTube API Services to find and study public videos. By using Hookline you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies to that data. Numbers we fetch from YouTube are deleted after 30 days at most. If you connect your YouTube account, you can remove Hookline's access at any time from your Google security settings.

Hookline's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Cookies

We use a small number of cookies and browser storage only to keep you signed in and remember choices like light or dark mode. No advertising or cross-site tracking cookies.

How long we keep it

We keep your account and workspace while your account is open. When you delete your account, we delete your workspace, uploads and saved keys within 30 days, except small records we must keep by law or to prevent fraud. Server logs are kept for a short time and then deleted.

Your choices and rights

• See, download or correct what we hold about you.
• Delete your account and everything in it.
• Disconnect any key or social account at any time in Settings.
• Ask us any question about your data.

Email support@hookline.studio from the address on your account and we'll answer within 30 days. Depending on where you live (for example California or the EU), you may have extra rights under local law, and we'll honor them.

Security

We encrypt connections to Hookline, lock saved keys and social sign-ins with encryption, keep each workspace separate from every other, and limit how fast anyone can try to sign in. No system is perfect, so if something ever goes wrong we'll tell affected people promptly.

Kids

Hookline is for adults 18 and older. We don't knowingly collect data from anyone younger. If you think a child has made an account, email us and we'll delete it.

Changes

If we change this policy in a way that matters, we'll update the date at the top and tell signed-in users before the change takes effect.