Privacy policy

This policy explains what personal data Hookline collects, why we use it, and the choices you have.

What we collect

• Account details: your name, email address, password (stored only as a salted hash), profile photo, and your Google account ID if you sign in with Google.
• Creator profiles: your handle, bio, location, niches, rates, social accounts, portfolio, and shipping address if you add one.
• Brand workspaces: company details, team members and campaign briefs.
• Activity: applications, contracts, deliveries, messages, reviews and transaction history.
• Safety and support: reports you send us, people you block, and what you send through our contact form, including your name, email and IP address.
• Technical data: IP address, browser type and sign-in times, which we use for security.

Card and bank details go directly to our payment provider. We don't see or store them.

How we use it

• To run the marketplace: showing your profile, holding and moving payments, and sending you notifications.
• To keep the platform safe: preventing fraud, enforcing our terms, and resolving disputes.
• To improve the product, using our own records of how it's used.

We don't sell your personal data, and we don't use advertising cookies. We use one essential cookie to keep you signed in, plus a short-lived one while you sign in with Google.

Who can see what

• Your creator profile is public, except your email and shipping address.
• A brand sees your shipping address only on a contract that needs a product shipped.
• Messages are visible to the two parties in the conversation, and to our staff when reviewing a contract, a dispute or a safety report. Each time staff read a conversation, it's recorded in an internal log.
• If you report someone, we don't tell them it was you. If you block someone, we don't tell them that either.

Who we share it with

We share data with service providers who help us run Hookline, such as our payment, hosting and email providers, under contracts that limit what they can do with it. We may also disclose data when the law requires it.

When a creator reports a post, we send its public link to YouTube or TikTok if it's on one of them, to check the link. We also use YouTube API Services to read public stats for YouTube posts, and Google's Privacy Policy applies to that. We don't send them your name or account details.

How long we keep it

We keep your data while your account is open. When you close your account, we remove your email address, name, photo, password and sign-in methods, along with your bio, shipping address, social accounts and portfolio.

Some records stay. We keep contracts, payments and security logs for as long as financial and legal rules require, including any earlier email addresses in those logs. Messages you sent and reviews you left also stay, so the other person keeps their records, but your name no longer appears on them.

Your rights

Depending on where you live, you may have rights to access, correct, delete or export your data, or to object to how we use it. Here's how to do each of those:

• See or correct your data: most of it is in your profile and settings, where you can edit it. You can change your email address there too, after confirming it from the new address.
• Download your data: use "Download my data" in your settings to get a JSON file of your account, profile, socials, portfolio, applications, contracts, messages you wrote, reviews, notifications, wallet transactions and payouts. A brand workspace's owner also gets its campaigns, team names, applications, contracts and transactions. The file leaves out passwords, security codes, and other people's private details such as their email or shipping address.
• Control our emails: turn off each type of optional email in your settings, or use the unsubscribe link at the bottom of those emails. Emails that protect your account or your money can't be turned off: verifying your email or account, password resets, sign-in alerts, payouts and disputes.
• Delete your data: close your account in your settings. You'll need to finish or cancel active contracts and withdraw your balance first, and a workspace owner also needs to remove their teammates and move to the Starter plan. If you can't sign in, or want something deleted that closing your account doesn't cover, email us.

For anything else, or to object to how we use your data, email [email protected].

Changes

We'll post updates to this page, and tell you about material changes.