Privacy Policy

1. What this covers

This policy says what [operator's registered name] ("we", "us") collects when you use Hooky, why, who else handles it, and what you can ask of us. In short: we collect what is needed to run your agent, we do not sell your data, and you can ask us to delete it.

2. What we collect

Your account: your email address and how you sign in (Google, or email and password). Passwords are held by our sign-in provider; we never see them.

Your app: the address you give us, what we read from that public page (its name, description and icon), and what you tell us about it: what it does, who it is for, and how many posts you want.

Your conversations with the agent, and the notes and rules it keeps. You can see and remove every note and rule in Settings.

Your posts: the words, the generated pictures, and their state (made, sent, published).

Your TikTok connection: your handle, an identifier for the connection, and the numbers of the posts we made: views, likes, comments and shares. We never see or store your TikTok password.

Your revenue, only if you connect it: the key you give us, stored encrypted, and the total you earned on each day. We do not read who your customers are or what they bought.

Your subscription: your plan and its status. Your card details go straight to our payment provider; we never see or store them.

Records needed to run and protect the service: what was done and when, what each post cost us to make, and faults.

3. Why we use it

To do what you pay for: learn your app, make posts, send them to your TikTok, read how they did, and make better ones. This is necessary for our contract with you.

To run the business: billing, answering you, preventing abuse, and fixing faults. We have a legitimate interest in doing so.

We do not send you marketing email. We write to you only when we must, for example about a change to these terms or to your plan.

We do not sell your data. We do not use your conversations, posts or results to make posts for other customers.

4. AI

The agent runs on AI models provided by other companies. To write a post, what we know about your app, your conversation with the agent and your results are sent to a language model provider. To make pictures, a description of each picture is sent to an image generation provider. We use their paid services for businesses. Your revenue key is never sent to either.

5. Who else handles your data

We use a small number of companies to run Hooky, each of which receives only what it needs: a provider of sign-in, database and file storage; a payment provider; a language model provider; an image generation provider; a service that sends drafts to TikTok and reads post numbers; and a hosting provider. TikTok receives the drafts we send to your account. Write to us for the current list of names.

Some of these companies are in the United States. Where data leaves your country, it is protected by the safeguards the law requires, such as standard contractual clauses.

We may disclose data if the law requires it.

6. Cookies

We use only the cookies needed to keep you signed in. We use no advertising cookies and no tracking across other sites.

7. How long we keep it

We keep your data while your account is active. If you cancel, we keep your app, posts and results so that you can come back, and we disconnect your TikTok account seven days after your subscription ends.

To have your account and its data deleted, write to [contact email]. We delete it within 30 days, except what the law requires us to keep, such as invoices.

If you remove your revenue key in Settings, the key is deleted at once. The daily totals already read are kept with your results until your account is deleted.

8. Your rights

Depending on where you live, you have the right to see the data we hold about you, to have it corrected, exported or deleted, and to object to or restrict some uses of it. Write to [contact email] and we will answer within 30 days. If you are in the European Union or the United Kingdom, you can also complain to your data protection authority.

9. Security

Each customer's data is kept apart from every other customer's. Keys you give us are stored encrypted. Connections to Hooky are encrypted. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

10. Children

Hooky is for adults running a business. It is not for anyone under 18, and we do not knowingly collect data from children.

11. Changes and contact

If we change this policy in a way that matters, we will tell you by email or inside Hooky before the change applies.

Questions about privacy: [contact email].