Legal · updated 2026-10-03
Privacy policy
What personal data [Company legal name] (“Hookloop”) collects, why, and the choices you have.
Draft
Who this covers
Visitors to our website and waitlist, and people who use Hookloop (customers and their team members). Creators who use the creator portal, and end users of our customers’ apps, are covered in the sections below.
What we collect
Account data: name, email, workspace and role. Billing data is handled by Stripe; we never see full card numbers.
Usage data: pages and features used, device and browser details, and IP-derived approximate location, to run, secure and improve the service.
Waitlist data: what you enter, plus the page and campaign you came from.
Content and connected accounts: what you upload or connect. Provider keys are encrypted at rest and never shown again.
App end users (as a processor)
When a customer installs the Hookloop SDK or connects revenue webhooks, we process data about their app’s users on the customer’s behalf: an app user ID, hashed IP address, click and install signals, subscription events, and optional survey answers or creator codes. We use it only to provide attribution to that customer, under our Data Processing Addendum. We do not sell it or use it to build profiles across customers.
Creators
If you work with a customer through the creator portal we process your contact details, social handles, public post statistics, messages and payout details to run that collaboration for the customer.
Why we use it
To provide the service (contract), keep it secure and improve it (legitimate interests), bill you (contract and legal obligation), and send product emails you can opt out of (consent or legitimate interests).
Who we share it with
Sub-processors that host and run the service (for example cloud hosting, database, email and payments), and AI or data providers you choose to route work to. The current list is at [sub-processor URL]. We share data with authorities only when legally required.
Retention
Account data for as long as your account is open, then 30 days for export before deletion (backups roll off within 90 days). Hashed IPs used for attribution are kept only as long as needed to match installs.
Your rights
Depending on where you live you can access, correct, delete or export your data, object to or restrict processing, and complain to a supervisory authority. Email [privacy@gethookloop.com]. App end users should contact the app first; we will help them respond.
International transfers
We may process data outside your country, using safeguards such as Standard Contractual Clauses where required.
Changes
We will post changes here and email customers about material ones.