Privacy Policy

Hookra Ltd
Last updated: June 2026

1. Who We Are

Hookra Ltd ("Hookra", "we", "us", "our") is a company registered in England and Wales. Our registered address is 9 Beatty Road, London, N16 8EA.

We operate the platform available at hookra.co (the "Platform"), a B2B SaaS service for performance marketers and creative strategists.

For questions about this policy, contact us at: hello@hookra.co

2. What Data We Collect

2.1 Account Data

When you create an account, we collect:

• Full name
• Email address
• Password (stored as a one-way encrypted hash — we never store your plain-text password)

2.2 Billing Data

When you subscribe to a paid plan (Pro, Agency, or Hookra+), we collect:

• Billing name
• Billing address
• Last 4 digits of your payment card and card expiry date

We do not store full card numbers. All payment processing is handled by Stripe Inc. Stripe is PCI DSS compliant and processes your payment details directly. See Stripe's privacy policy at stripe.com/gb/privacy.

2.3 Usage Data

We may collect information about how you use the Platform, including:

• Pages visited and features used
• Session duration and frequency
• Actions taken within the Platform (e.g. filters applied, creatives saved to boards)

2.4 Technical Data

• IP address
• Browser type and version
• Device type and operating system
• Referral source

2.5 Communications

If you contact us by email, we retain those communications to respond to your query and improve our support.

3. How We Use Your Data

We use your data for the following purposes, each with a lawful basis under UK GDPR:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.

4. AI Processing

Hookra uses OpenAI's API (GPT-4o and Whisper) to analyse ad creative content — including hook text, video transcripts, and creative metadata — in order to generate psychological classifications and confidence scores.

What is sent to OpenAI: Ad hook text, transcripts, and creative context. We do not send your name, email address, or payment information to OpenAI.

OpenAI's data handling: OpenAI does not use data submitted via the API to train their models by default. See OpenAI's privacy policy at openai.com/policies/privacy-policy.

5. Cookies

We use cookies and similar technologies to operate the Platform. These include:

• Strictly necessary cookies: Required for authentication and session management (set by Supabase Auth). These cannot be disabled as the Platform cannot function without them.
• Analytics cookies: We may use PostHog or Vercel Analytics to understand how the Platform is used. These are anonymised and do not track you across third-party sites. We will update this policy and request your consent before enabling any analytics cookies.

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in.

6. Data Sharing

We share your data only with the following third-party service providers, and only to the extent necessary to provide the Platform:

We do not sell your personal data. We do not share your data with advertisers or data brokers.

We may disclose your data if required to do so by law, court order, or regulatory authority.

7. Data Retention

You can request deletion of your account and personal data at any time by emailing hello@hookra.co. Billing records are retained for the legally required period regardless of account deletion.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email hello@hookra.co. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Passwords stored using one-way hashing (never in plain text)
• All data transmitted over HTTPS/TLS
• Access controls limiting who can access production data
• Payment data handled entirely by Stripe — no card data stored on our servers

10. International Data Transfers

Hookra Ltd is a UK company. Some of our service providers are based outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the ICO.

11. Children

The Platform is intended for business users only. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact hello@hookra.co and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. The "last updated" date at the top of this page reflects the most recent revision.

13. Contact

Hookra Ltd
9 Beatty Road
London
N16 8EA
United Kingdom

Email: hello@hookra.co