Legal
Privacy Policy
Last updated: October 17, 2026
Hookline writes, designs, and posts TikTok slideshows for your app. This policy covers what we collect, why, and who handles it. The short version: we collect what the product needs to work, we don't sell anything to anyone, and you can delete your account and its data whenever you want.
What we collect
- Account info. Your email address and a password (stored by Supabase, our auth provider — we never see the password itself).
- What you give the product. Your app's name, pitch, audience, and the screenshots you upload so it can build carousels.
- Content we generate for you. The carousels, captions, and schedules created in your workspace.
- TikTok connection. When you connect TikTok, we store an access token so we can post on your behalf when you approve a post. We never see or store your TikTok password.
- Billing. Payments are processed by Lemon Squeezy. We see your email and subscription status, never your card details.
- Site analytics. The landing page uses PostHog to measure visits, clicks, and which sections people reach — including an A/B copy experiment — and may record short anonymized session replays and click heatmaps. Recordings mask form fields. No advertising trackers.
How we use it
- Run the product: generate carousels, post them to your connected TikTok at the times you approve, and report what landed.
- Improve the product: aggregate results feed back into what the generator writes next.
- Talk to you: transactional email about your account and subscription.
Who processes it
- Supabase — authentication and account records.
- Fly.io — application hosting and storage.
- Vercel — marketing site hosting.
- Lemon Squeezy — payments and subscriptions (merchant of record).
- TikTok — content posting to your account, via their official API.
- PostHog — landing page analytics.
- AI model providers — your app brief is sent to a language model API to write carousel copy. The brief describes your product; it contains no personal data beyond what you type.
What we don't do
- Sell or rent your data. Full stop.
- Post anything to your TikTok without a connected account and an approved, scheduled post.
- Read your TikTok messages, followers, or anything unrelated to posting.
Retention and deletion
Your data lives in your workspace for as long as your account exists. Disconnecting TikTok removes the stored token. To delete your account and everything in it, email hello@hookline.app and we'll remove it — workspace, generated content, connection tokens, all of it.
Cookies
The app uses a session cookie for sign-in. The landing page uses a first-party cookie to keep you in one variant of our A/B test and to distinguish unique visits in PostHog. No cross-site tracking cookies.
Changes
If this policy changes meaningfully, we'll update the date above and, where the change affects how your data is used, email you at your account address.
Contact
Questions or deletion requests: hello@hookline.app.