Privacy Policy

Effective Date: June 6, 2026 · Last Updated: June 6, 2026

1. Information We Collect

Information you provide directly:

Name and email address — when you create an account or sign in
Password — stored as a one-way encrypted hash (we never store your plain-text password)

Collected automatically:

IP address — used for rate limiting and abuse prevention
Browser/device info — user-agent string, used for session fingerprinting
Usage data — pages visited, features used, hook generations performed

Payment information: We do not store card details. All payments are processed by Razorpay. We only receive payment status confirmation.

2. How We Use Your Information

Create and manage your account
Process payments and activate your subscription
Send transactional emails (sign-in links, subscription confirmations)
Enforce free-tier limits and prevent abuse
Improve our product based on usage patterns
Respond to support requests

3. Cookies and Tracking

Session cookie: We use a single first-party cookie (hookmint_session) to keep you signed in. HTTP-only, expires after 90 days.

Free-tier tracking cookie: A signed cookie that tracks free hook generations solely to enforce the free usage limit.

Meta Pixel: We use the Meta Pixel (Facebook Pixel) to measure advertising effectiveness. It may connect your visit with your Facebook/Instagram account. You can opt out via Facebook's Ad Preferences.

4. Data Sharing

We do not sell your data. We share it only with these services:

Service	Purpose	Privacy Policy
Razorpay	Payment processing	razorpay.com/privacy
Supabase	Database hosting	supabase.com/privacy
Resend	Transactional email	resend.com/privacy
Anthropic	AI hook generation	anthropic.com/privacy
Vercel	Website hosting	vercel.com/legal/privacy-policy
Meta (Facebook)	Advertising analytics	facebook.com/privacy

Instagram API data (where applicable): Any data accessed via the Instagram Graph API is used solely to provide HookMint's features to the authorizing user and is not shared with third parties, sold, or used for advertising purposes, in accordance with Meta's Platform Terms.

5. Data Retention

Account data — retained while your account is active
Session data — expires after 90 days of inactivity
Payment records — retained for 7 years (Indian financial regulations)
Event logs — retained up to 12 months for fraud analysis

6. Your Rights

You may access, correct, or delete your data, or withdraw marketing consent at any time. Email: thehookmint@gmail.com

7. Data Security

HTTPS encryption, bcrypt password hashing, HMAC-signed cookies, service-role database access.

8. Children's Privacy

HookMint is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy from time to time. Continued use after changes constitutes acceptance.

10. Instagram API Data

If you connect your Instagram account, HookMint accesses only the permissions you explicitly grant. We use Instagram API data solely to provide features you request (such as publishing content or reading insights). We do not store Instagram data beyond what is necessary to complete the requested action.

11. Contact Us

Email: thehookmint@gmail.com
Website: https://hookmint.in

← Back to HookMint