Privacy Policy

HookMind ("we", "us") helps you paste an Instagram reel link, understand why it went viral, and recreate it as a structured storyboard or screenplay. This policy explains what data we collect, why, and what rights you have over it.

1. What we collect

• Account data: your email address and a bcrypt hash of your password (we never store your password in plain text).
• Content you submit: Instagram reel URLs you paste in, and the transcripts, frame captures, hook/virality analysis, mind maps, flashcards, quizzes, chat messages, and remix scripts generated from them.
• Bring-your-own API keys (BYOK): if you add your own OpenAI, Google Gemini, or Anthropic API key, it is encrypted at rest (Fernet/AES) before being stored, and is only decrypted server-side at the moment it's used to call that provider on your behalf.
• Technical data: IP address (used for rate-limiting to prevent abuse of free credits and API endpoints), request timestamps, and standard server logs.
• Analytics: we use Google Analytics (GA4), which sets cookies and collects usage data such as pages visited, session duration, and general device/browser information.

2. How we use it

• To operate your account: authentication, credit balance, notebooks, and your reel/analysis history.
• To run the AI analysis and video-processing features you request.
• To enforce rate limits and free-trial credit limits and prevent abuse.
• To understand product usage and improve HookMind (via Google Analytics).
• To send you account-related email: password reset links and, optionally, an email verification link after signup. We do not send marketing email at this time.

3. Third parties who process your data

When you use an AI-powered feature (hook analysis, remix, chat, mind map, audio overview, flashcards, quiz), the relevant submitted content (transcript, frames, or your question) is sent to whichever AI provider is powering that request:

• OpenAI, Google (Gemini), and/or Anthropic (Claude) — either using HookMind's platform credits or your own BYOK key, depending on your account state. Each provider processes this content under its own API terms and privacy policy.
• Apify — used to fetch (scrape) the public Instagram reel at the URL you submit, so we can download and process its video/audio.

We do not sell your personal data to anyone, for any purpose.

4. Data retention

We retain your account, reels, notebooks, and generated content for as long as your account exists, so your history stays available to you. You can delete individual reels/notebooks in the app, or delete your entire account (see below), which permanently removes your account row and all data tied to it — reels, notebooks, chat history, remixes, credit transaction history, and stored API keys.

5. Your rights

• Access: everything you've submitted and generated is visible to you in the app itself.
• Deletion: you can permanently delete your account and all associated data at any time from Account Settings inside the app. This is irreversible.
• Correction: contact us to correct inaccurate account data.
• If you are in the EEA/UK or California, you may have additional rights under GDPR/CCPA (e.g. data portability, objection to processing). Contact us to exercise them.

6. Children's privacy

HookMind is not directed to, and is not intended for use by, anyone under 13 (or under 16 where required by local law, e.g. GDPR-K). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

7. Security

Passwords are hashed with bcrypt (never stored in plain text). Password reset and email verification links use single-use, cryptographically random tokens that are themselves hashed before storage. BYOK API keys are encrypted at rest. That said, no system is 100% secure, and you should never reuse sensitive passwords across services.

8. Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions, correction requests, or deletion requests: support@hookmind.co