Privacy Policy

Hookology ("Hookology", "we", "us", or "our") provides an AI-powered analytics and creative-intelligence platform for performance marketers (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it.

1. Who we are

Hookology is operated by Hookology Ltd. If you have any questions about this policy or our handling of your data, contact us at privacy@hookology.ai.

2. Information we collect

Account information

When you sign up, we collect your name, email address, password (stored hashed), profile picture if provided, and any workspace or company information you enter.

Advertising and commerce data you connect

When you connect a third-party platform (such as Meta Ads, Google Ads, TikTok Ads, Shopify, or analytics providers), we receive data from those services through their APIs. This typically includes:

• Campaign, ad set, ad, and creative metadata (names, IDs, status, asset URLs)
• Aggregated performance metrics (spend, impressions, clicks, conversions, revenue, ROAS)
• Product, order and customer-level commerce data where you connect a store
• Tracking events you send us via our SDK or server-side API
• OAuth tokens needed to refresh your connection

We only request the scopes required to power the features you use, and we never sell this data to third parties.

Usage data

We collect technical information about how you interact with the Service, including pages visited, features used, device and browser type, IP address, and timestamps. This is used to operate, secure and improve the Service.

Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to remember your preferences, and limited analytics cookies to understand product usage. You can control cookies through your browser settings.

3. How we use your information

• Provide, maintain and improve the Service and its AI features
• Generate insights, recommendations, forecasts and creative analyses for your workspace
• Authenticate users, prevent fraud, and secure the platform
• Send transactional emails (account, billing, security)
• Respond to support requests and communicate product updates
• Comply with legal obligations and enforce our Terms of Service

4. AI processing

Hookology uses large-language-model providers to power features like creative tagging, recommendations, and forecasting. When these features run, anonymised or pseudonymised performance data may be sent to model providers under contracts that prohibit them from using your data to train their models. We do not share raw customer-level commerce data with model providers unless strictly necessary for the feature you triggered.

5. Legal bases for processing (UK / EEA users)

• Contract: to deliver the Service you have signed up for
• Legitimate interests: to secure, improve and analyse the Service
• Consent: for non-essential cookies and optional marketing communications
• Legal obligation: for tax, accounting, and regulatory requirements

6. Sharing your information

We share data only with:

• Sub-processors that help us run the Service (cloud hosting, database, email, error monitoring, AI providers, payment processors)
• Ad and analytics platforms you have connected, when we read from or write back to them on your instruction
• Authorities when required by law, or to protect our rights, users, or the public
• Acquirers in the event of a merger, acquisition, or sale of assets, with notice to you

We never sell your personal information.

7. International data transfers

Hookology is operated from the United Kingdom and may transfer data to sub-processors in the EEA, US, and other regions. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.

8. Data retention

We retain account data for as long as your account is active. Connected advertising data is retained while the connection is active and for up to 24 months afterwards to support historical reporting. You can request earlier deletion at any time.

9. Your rights

Depending on your location, you have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to lodge a complaint with your local data protection authority (in the UK, the ICO). To exercise any of these rights, email privacy@hookology.ai.

10. Security

We use industry-standard measures to protect your data, including encryption in transit, encryption at rest for sensitive fields, role-based access controls, and regular security reviews. No system is perfectly secure; please use a strong unique password and enable multi-factor authentication where available.

11. Children

The Service is not intended for individuals under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-app notice before they take effect.

13. Contact

Questions or requests: privacy@hookology.ai.