Privacy Policy

Last updated: 10 July 2026

Hooklab ("we", "us") turns proven short-form hooks into ready-to-post marketing content for your app, site, or SaaS. This page explains what we collect, why, and your rights. We aim to collect as little personal data as possible.

1. Information we collect

Account information

When you sign in with Google, we receive your email address, name, and profile picture. We use this to identify your account, send important service emails, and display your name in the app.

Product profile

If you save a product profile (your app, site, or SaaS URL, plus its name, description, audience, and brand color), we store it and send it to our AI model with each generation so the output describes your product accurately. If you use URL import, we fetch the public page at the URL you provide.

Generated content

We store the text plan (slide copy, captions, hashtags) of carousels you generate so you can revisit them. Rendered slide images are delivered to your browser and are not stored on our servers.

Saved hooks

We store which public hooks you save to your list.

Payment data

Payments are processed by Stripe. We never see or store your full card details. We retain a Stripe customer ID, subscription status, and credit balance to manage your account.

Cookies

We use a single HttpOnly session cookie (tg_session) to keep you signed in. We do not use third-party advertising or tracking cookies. We use Vercel Analytics for aggregate page-view counts, which does not use cookies and does not track individuals.

2. How we use your information

• To run the service: read your product's page, generate carousels, save your history.
• To process payments and manage subscriptions and credits.
• To prevent abuse and enforce usage limits.
• To respond to support requests.

We do not use your content to train AI models. We do not sell your data to anyone, ever.

3. Third parties we share data with

• Google — sign-in only.
• Stripe — payment processing.
• Google (Gemini) — receives your product profile and the selected hook to generate slide copy and images. Google does not retain inputs for training under their API terms.
• Vercel — our hosting provider.
• Neon — our database provider.

4. Data retention

Generated content stays in your history until you delete it or close your account. Sessions expire after 30 days of inactivity. Stripe records are retained as required by law (typically 7 years).

5. Your rights

You can:

• Edit or clear your product profile at any time.
• Cancel your subscription at any time from your account page.
• Request a full export or deletion of your account data by emailing hyperfixlabs@gmail.com.

If you are in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA, including the right to object to processing and the right to lodge a complaint with your local supervisory authority.

6. Security

Sessions are HttpOnly and rotated regularly. Passwords are never stored — sign-in is delegated to Google. All traffic is HTTPS. We follow industry-standard practices but cannot guarantee absolute security.

7. Children

Hooklab is not intended for anyone under 16. We do not knowingly collect data from children.

8. Changes

If we materially change this policy, we will update the "Last updated" date and, where appropriate, notify you by email.

9. Contact

Questions about this policy or your data? Email hyperfixlabs@gmail.com.