Hook Inspo

Privacy policy

Hook Inspo
Last Updated: November 1, 2025

1. INTRODUCTION

Welcome to Hook Inspo (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Hookify platform (the “Service”), which provides AI-powered content hook generation and testing services for creators, agencies, and brands.

We are committed to protecting your privacy and ensuring transparency in how we handle your data. This policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR) and similar regulations.

Data Controller Relationship:

  • For Individual Users (Free, Creator, Pro plans): Hook Inspo acts as the Data Controller for your personal information.
  • For Business Customers (Agency plan and custom enterprise arrangements): You (the business customer) may act as the Data Controller for your end users’ data, and Hook Inspo acts as a Data Processor on your behalf. In such cases, a separate Data Processing Agreement (DPA) applies. Contact legal@hookinspo.com to execute a DPA.

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide

Account Information:

  • Name and email address
  • Password (encrypted)
  • Company name and business information (for business accounts)
  • Payment information (processed by our payment processor Paddle)

Content Data:

  • Content hooks you generate
  • Campaign data and performance metrics
  • Testing parameters and results
  • Custom training data (if provided)
  • Feedback and ratings on generated hooks

Communications:

  • Support inquiries and correspondence
  • Survey responses
  • Feedback and testimonials

2.2 Automatically Collected Information

Usage Data:

  • Pages visited and features used
  • Time spent on platform
  • Click patterns and interaction data
  • Hook generation requests and results
  • API usage and performance metrics

Technical Information:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Referral URLs
  • Session data

Cookies and Tracking Technologies:

  • Essential cookies for authentication and security
  • Analytics cookies to understand usage patterns
  • Preference cookies to remember your settings
  • Marketing cookies (only with your consent)

2.3 Information from Third Parties

Social Media Platforms:

  • If you connect your TikTok, Instagram, YouTube, or other social accounts, we collect performance data for your content according to each platform’s API and terms
  • Public engagement metrics (views, likes, comments, shares)

Payment Processors:

  • Transaction confirmations and billing information from Paddle
  • Subscription status and payment history

Data Sources for Hook Generation:

  • We collect publicly available social media content from platforms like Reddit, TikTok, HackerNews, and RSS feeds to train our AI models and generate relevant hooks
  • This data is anonymized and used only to improve our service

3. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

3.1 Service Provision

  • Create and maintain your account
  • Generate AI-powered content hooks
  • Provide hook testing and performance prediction
  • Process payments and manage subscriptions
  • Deliver customer support

3.2 Service Improvement

  • Analyze usage patterns to improve features
  • Train and refine our AI models
  • Develop new features and services
  • Conduct research and analytics
  • Test platform performance and reliability

3.3 Communication

  • Send service-related notifications
  • Provide customer support responses
  • Send billing and subscription updates
  • Share product updates and new features (with your consent)
  • Request feedback and conduct surveys

3.4 Legal and Security

  • Prevent fraud and abuse
  • Enforce our Terms of Service
  • Comply with legal obligations
  • Protect our rights and property
  • Ensure platform security

3.5 Marketing (With Consent)

  • Send promotional emails about new features
  • Share relevant content and tips
  • Conduct marketing campaigns
  • You can opt-out of marketing communications at any time

4. LEGAL BASIS FOR PROCESSING (GDPR)

For users in the European Economic Area (EEA), UK, and Switzerland, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide our Service (Art. 6(1)(b) GDPR)
  • Legitimate Interests: Analytics, fraud prevention, and service improvement (Art. 6(1)(f) GDPR)
  • Consent: Marketing communications and non-essential cookies (Art. 6(1)(a) GDPR)
  • Legal Obligation: Compliance with laws and regulations (Art. 6(1)(c) GDPR)

5. DATA SHARING AND DISCLOSURE

We do not sell your personal information. We share your data only in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers who process data on our behalf:

Infrastructure and Hosting:

  • all-inkl.com (German web hosting provider) for data storage and processing
  • Content delivery networks (CDNs)

Analytics and Performance:

  • Analytics services to understand usage patterns
  • Error tracking and monitoring services

Payment Processing:

  • Paddle for payment processing and subscription management
  • Payment processors never store your full payment card details

AI and Machine Learning:

  • OpenAI (GPT models) for AI-powered hook generation
  • Anthropic Claude for AI-powered hook generation
  • Embedding services for semantic search

Communication:

  • Email service providers for transactional and marketing emails
  • Customer support platforms

All service providers are contractually obligated to protect your data and use it only for the specified purposes.

5.2 Business Transfers

If Hook Inspo is involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

  • Comply with legal obligations
  • Protect our rights and property
  • Prevent fraud or abuse
  • Protect the safety of users or the public

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

6. DATA RETENTION

We retain your personal information for as long as necessary to provide our Service and comply with legal obligations:

  • Account Data: Retained while your account is active
  • Content and Campaigns: Retained while your account is active and for 90 days after deletion
  • Usage and Analytics Data: Retained for 24 months
  • Payment Records: Retained for 7 years for tax and accounting purposes
  • Legal Compliance Data: Retained as required by applicable laws

After these periods, we will securely delete or anonymize your data unless longer retention is required by law.

You can request deletion of your account and associated data at any time by contacting privacy@hookinspo.com.

7. DATA SECURITY

We implement robust security measures to protect your personal information:

7.1 Technical Safeguards

  • Encryption in transit (TLS/SSL) and at rest
  • Secure authentication with password hashing (bcrypt)
  • Regular security audits and vulnerability assessments
  • Intrusion detection and prevention systems
  • Secure API access with rate limiting

7.2 Organizational Safeguards

  • Access controls and authentication requirements
  • Employee training on data protection
  • Confidentiality agreements with staff and contractors
  • Regular security policy reviews
  • Incident response procedures

7.3 Third-Party Security

  • All service providers undergo security assessments
  • Data Processing Agreements with GDPR-compliant terms
  • Regular vendor security reviews

Despite our security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but continuously work to enhance our protections.

8. YOUR PRIVACY RIGHTS

Depending on your location, you have various rights regarding your personal information:

8.1 Rights for All Users

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate or incomplete information
  • Deletion: Request deletion of your account and data
  • Data Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing of your personal data
  • Opt-Out: Unsubscribe from marketing communications

8.2 Additional Rights (GDPR – EEA/UK Users)

  • Right to Restriction: Request limitation of processing
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for processing at any time
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

8.3 Additional Rights (CCPA/CPRA – California Users)

  • Right to Know: Categories and specific pieces of personal information collected
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of sale or sharing of personal information (Note: We do NOT sell personal information)
  • Right to Non-Discrimination: Equal service regardless of privacy rights exercise
  • Right to Correct: Correct inaccurate personal information
  • Right to Limit: Limit use of sensitive personal information

8.4 How to Exercise Your Rights

To exercise any of these rights:

  • Email us at: privacy@hookinspo.com
  • Use the data export feature in your account settings
  • Submit a request through our Privacy Portal (if applicable)

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our Service.

9.2 Types of Cookies We Use

Essential Cookies (Always Active):

  • Authentication and session management
  • Security and fraud prevention
  • Basic functionality

Analytics Cookies (With Consent):

  • Usage statistics and performance metrics
  • Feature usage analysis
  • Error tracking

Preference Cookies (With Consent):

  • Language and display preferences
  • User interface customization

Marketing Cookies (With Consent):

  • Campaign effectiveness measurement
  • Personalized content recommendations

9.3 Managing Cookies

You can manage cookie preferences through:

  • Our cookie consent banner (shown on first visit)
  • Your account privacy settings
  • Your browser settings (though this may limit functionality)

To modify or withdraw cookie consent, click “Cookie Settings” in the footer of our website.

9.4 Third-Party Cookies

Some cookies are set by third-party services we use (e.g., Google Analytics). These are subject to the respective third parties’ privacy policies.

10. INTERNATIONAL DATA TRANSFERS

Hook Inspo is based in [Your Location]. If you access our Service from outside this jurisdiction, your information may be transferred to, stored, and processed in countries where our service providers operate.

10.1 Safeguards for International Transfers

For transfers from the EEA/UK to other countries:

  • We use Standard Contractual Clauses (SCCs) approved by the European Commission
  • We conduct Transfer Impact Assessments
  • We implement additional security measures where necessary

10.2 Your Consent

By using our Service, you consent to the transfer of your information to countries outside your residence, including countries that may not have the same data protection laws as your country.

11. CHILDREN’S PRIVACY

Our Service is not intended for children under 16 years of age (or the applicable age of digital consent in your jurisdiction).

We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@hookinspo.com, and we will delete it promptly.

Parents and guardians should supervise children’s online activities and help enforce this policy.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

12.1 How We Notify You

When we make material changes:

  • We will update the “Last Updated” date at the top
  • We will notify you via email (to your registered email address)
  • We will display a prominent notice on our website
  • For significant changes, we may require you to actively acknowledge the changes

12.2 Your Continued Use

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy. If you do not agree with the updated policy, you must stop using the Service and may close your account.

13. DATA PROTECTION OFFICER

For questions about this Privacy Policy or our data practices, you can contact our Data Protection Officer:

Data Protection Officer
Hook Inspo
Email: dpo@hookinspo.com
Privacy Inquiries: privacy@hookinspo.com

14. SPECIFIC REGIONAL PROVISIONS

14.1 European Economic Area (EEA)

Data Controller: Hook Inspo is the data controller for personal information collected through the Service.

EU Representative: [If you have an EU representative, provide details here]

Data Processing Agreement: For business customers, we offer a Data Processing Agreement (DPA) that includes Standard Contractual Clauses.

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

14.2 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: Request details about personal information collected, used, disclosed, or sold in the past 12 months

Right to Delete: Request deletion of personal information, subject to certain exceptions

Right to Opt-Out: Opt-out of sale or sharing of personal information

Right to Correct: Correct inaccurate personal information

Right to Limit: Limit use and disclosure of sensitive personal information

Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights

Sale of Personal Information: We do NOT sell your personal information.

Sensitive Personal Information: We do not collect or process sensitive personal information as defined by the CCPA/CPRA.

Do Not Track: We do not currently respond to “Do Not Track” browser signals.

Shine the Light: Under California Civil Code Section 1798.83, you can request information about our disclosure of personal information to third parties for direct marketing purposes.

To exercise your California privacy rights, contact us at privacy@hookinspo.com with “California Privacy Rights Request” in the subject line. We will verify your identity and respond within 45 days.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.

14.3 United Kingdom

For UK residents, Hook Inspo complies with the UK GDPR and Data Protection Act 2018. The rights and safeguards described in this policy apply to UK residents.

UK Representative: [If applicable, provide details]

ICO: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/

14.4 Brazil (LGPD)

For Brazilian residents, we comply with the Lei Geral de Proteção de Dados (LGPD):

Data Controller: Hook Inspo

Legal Bases for Processing: Consent, contract performance, legitimate interests, legal obligations

Your Rights: Access, correction, deletion, portability, information about sharing, consent withdrawal

ANPD: You may file complaints with the Autoridade Nacional de Proteção de Dados (ANPD)

14.5 Canada (PIPEDA)

For Canadian residents, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA):

Privacy Officer: privacy@hookinspo.com

Complaints: You may file complaints with the Office of the Privacy Commissioner of Canada

15. BUSINESS CUSTOMER SPECIFIC TERMS (AGENCY PLAN & ENTERPRISE)

Note: This section applies only to customers using Hook Inspo for business purposes where they act as Data Controller for their end users’ data, typically customers on the Agency plan (€549/month) or custom enterprise arrangements. If you are an individual user (Free, Creator €29, or Pro €99 plan), Hook Inspo is the Data Controller and this section does not apply to you.

If you are using our Service on behalf of an organization and processing personal data of your end users through the platform:

15.1 Data Processing Relationship

For Business/Agency Customers:

You (Customer) are the Data Controller for end-user data you process through our Service.

Hook Inspo acts as a Data Processor, processing personal data on your behalf according to your instructions.

For Individual Users (Free, Creator, Pro): If you are using Hook Inspo as an individual creator or for your own business without processing other people’s personal data through the platform, you are not a Data Controller under this arrangement. Hook Inspo is the Data Controller for your account data and you are the Data Subject.

15.2 Data Processing Agreement (DPA)

For business customers who act as Data Controllers (Agency plan and enterprise customers), we offer a comprehensive DPA that includes:

  • Scope and purpose of processing
  • Data security measures
  • Sub-processor list and approval mechanism
  • Data breach notification procedures
  • Standard Contractual Clauses (for international transfers)
  • Audit rights and compliance verification
  • Data deletion and return procedures
  • Liability and indemnification terms

How to Obtain a DPA:

  • Email: sales@hookinspo.com or legal@hookinspo.com
  • Subject: “DPA Execution Request – Hook Inspo”

Who Needs a DPA:

  • Required: Agency plan customers (€549/month) and enterprise customers
  • Optional: Individual users who require it for their own compliance purposes
  • Not Required: Free, Creator, and Pro individual users (covered by this Privacy Policy)

15.3 Customer Responsibilities (For Business/Agency Customers Only)

This section applies only to business customers acting as Data Controllers.

As a Data Controller, you are responsible for:

  • Obtaining necessary consents from your end users
  • Providing appropriate privacy notices to your users
  • Complying with applicable data protection laws
  • Ensuring lawful basis for processing
  • Responding to data subject requests from your end users
  • Providing clear processing instructions to Hook Inspo
  • Conducting Data Protection Impact Assessments (DPIAs) where required

For Individual Users (Free, Creator, Pro): These responsibilities do not apply to you. Hook Inspo handles data protection compliance for your personal account data as the Data Controller.

15.4 Sub-Processors

We maintain a current list of all sub-processors at: https://hookinspo.com/legal/subprocessors

For Business/Agency Customers (Data Controllers):

  • We will notify you of any changes to our sub-processor list at least 30 days in advance
  • You have the right to object to new sub-processors within the objection period
  • Notification will be sent to your registered business email address
  • See the DPA for detailed objection procedures

For Individual Users (Free, Creator, Pro):

  • Sub-processor changes are managed by Hook Inspo in accordance with this Privacy Policy
  • Material changes will be communicated via email or website notice
  • You can review the current sub-processor list at any time on our website
  • If you have concerns about a sub-processor, contact privacy@hookinspo.com

16. AI AND MACHINE LEARNING

16.1 How We Use AI

Our Service uses artificial intelligence and machine learning to:

  • Generate content hooks based on your input
  • Predict hook performance
  • Analyze content trends
  • Personalize recommendations
  • Improve our algorithms over time

16.2 AI Training Data

What We Use for Training:

  • Publicly available social media content (anonymized)
  • Your hooks and performance data (with your consent)
  • Aggregated usage patterns across our platform
  • General-purpose language models (OpenAI, Anthropic Claude)

What We Don’t Use:

  • Your private messages or communications
  • Payment information
  • Personal identifying information in training data

16.3 Human Review

Our AI-generated content may be reviewed by human moderators to:

  • Ensure quality and appropriateness
  • Identify and prevent harmful content
  • Improve our models
  • Comply with platform policies

All reviewers are bound by strict confidentiality agreements.

16.4 Opting Out of AI Training

You can opt-out of having your content used for AI model training by:

  • Adjusting your privacy settings in your account
  • Contacting privacy@hookinspo.com

Note: Opting out may limit some features that rely on personalization.

17. DATA BREACH NOTIFICATION

In the event of a data breach that affects your personal information:

17.1 Our Response

  • We will investigate and contain the breach
  • Assess the risk to your personal data
  • Notify affected users without undue delay
  • Notify relevant authorities as required by law (within 72 hours for GDPR)
  • Take steps to prevent future incidents

17.2 What We Will Tell You

  • Nature of the breach
  • Types of data affected
  • Potential consequences
  • Measures taken to address the breach
  • Steps you can take to protect yourself
  • Contact information for questions

18. THIRD-PARTY LINKS

Our Service may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties.

Before providing personal information to any third party, please review their privacy policy. This Privacy Policy applies only to information collected by Hook Inspo.

19. ADDITIONAL INFORMATION

19.1 Analytics and Advertising Partners

We may use third-party analytics and advertising services that use cookies and similar technologies:

  • Google Analytics
  • Mixpanel
  • Hotjar
  • Meta Pixel (Facebook)
  • LinkedIn Insight Tag

These services have their own privacy policies. You can opt-out through:

  • Our cookie preferences
  • Network Advertising Initiative opt-out page
  • Digital Advertising Alliance opt-out page
  • Your browser settings

19.2 Social Media Integration

If you connect social media accounts:

  • We access only the permissions you grant
  • You can revoke access at any time through your social media settings
  • We collect performance metrics according to each platform’s API terms
  • We do not post to your accounts without your explicit permission

19.3 Email Communications

Transactional Emails: You cannot opt-out of service-related emails (account security, billing, legal notices)

Marketing Emails: You can opt-out by:

  • Clicking “Unsubscribe” in any marketing email
  • Adjusting email preferences in your account settings
  • Contacting privacy@hookinspo.com

20. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

General Privacy Inquiries:
Email: privacy@hookinspo.com
Subject Line: “Privacy Inquiry”

Data Subject Rights Requests:
Email: privacy@hookinspo.com
Subject Line: “Data Rights Request – [Your Request Type]”

Data Protection Officer:
Email: dpo@hookinspo.com

Business/DPA Inquiries:
Email: sales@hookinspo.com

Response Time:
We aim to respond to all inquiries within 5 business days and to data rights requests within 30 days (or as required by applicable law).

21. GLOSSARY

Personal Information/Personal Data: Information that identifies, relates to, or could reasonably be linked to you.

Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.

Data Controller: Entity that determines the purposes and means of processing personal data.

Data Processor: Entity that processes personal data on behalf of the Data Controller.

Consent: Freely given, specific, informed, and unambiguous indication of your wishes.

Anonymization: Process of removing identifying information so data cannot be linked back to you.

Encryption: Process of encoding data to prevent unauthorized access.

Standard Contractual Clauses (SCCs): EU-approved contract terms for international data transfers.

Data Subject: Individual whose personal data is being processed.

END OF PRIVACY POLICY

This Privacy Policy is effective as of the “Last Updated” date shown at the top. By using our Service, you acknowledge that you have read and understood this Privacy Policy.