Privacy Policy

1. Data Controller

Hooksnap [Operated by Fikad Inc.] is the data controller for the personal information we collect. For privacy-related inquiries, contact us at privacy@hooksnap.com.

Note: Polar acts as our Merchant of Record and separately processes payment data according to their own privacy policy.

Data Protection Officer: Dan Kim, dan@fikad.boo

2. Data We Collect

We collect the following categories of personal data:

Account Information — Email address and name, collected for account creation and communication. Google OAuth data, collected for authentication purposes.

Service Usage Data — YouTube video URLs, collected for the thumbnail generation service. Uploaded images, collected for template customization. Usage data (including feature interactions, credit consumption history, and Credit Rollover activity), collected for service improvement, analytics, and plan management.

Subscription and Plan Data — Plan type (Free, Starter, Pro, or Agency), subscription status, billing cycle dates, credit balance, and Credit Rollover history, collected for service delivery, credit management, and account administration.

Payment Information — Handled by Polar and not stored by us.

3. How We Use Your Data

We use your data to: provide and operate the Hooksnap service; manage your subscription plan, including tracking credit allocations, usage, and Credit Rollover balances for eligible plans (Starter, Pro, and Agency); process payments through our payment provider (Polar); send service-related communications (account updates, important notices, billing reminders, and Credit Rollover or plan status notifications); improve and develop our product; and comply with legal obligations.

Legal basis: We process your data based on contract performance (providing the service and managing your plan), legitimate interests (improving our product and managing credit systems), and legal compliance where required.

4. Data Sharing

We share data with the following third parties only as necessary to provide our service:

• Polar — Payment processing and invoicing
• Supabase — Database and file hosting (including credit balance and rollover data storage)
• Google / OpenAI — AI processing for thumbnail generation

We do not sell your personal data.

5. Data Retention

Account data is retained until you delete your account. Generated thumbnails are retained until you delete them, or 1 year after account closure. Credit and rollover history is retained for the duration of your active subscription. For cancelled subscriptions, credit history is retained for 90 days after the end of the final billing period for account reconciliation purposes, then permanently deleted. Server logs are retained for 90 days.

Method of destruction: Electronic data is permanently deleted using technical methods that make it irrecoverable. Paper documents, if any, are shredded.

6. Your Rights

Under GDPR (EU) and PIPA (Korea), you have the right to:

• Access — Request a copy of your personal data, including your credit balance, rollover history, and plan information
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your data ("right to be forgotten")
• Portability — Request your data in a portable format
• Withdraw consent — Withdraw consent where processing is based on consent
• Complaint — Lodge a complaint with a supervisory authority

Please note: Exercising your right to deletion will result in the closure of your account and the permanent forfeiture of all credits, including any rolled-over credits.

California Residents: Under CCPA/CPRA, you have the right to opt-out of the sale/sharing of personal data, request deletion, and not be discriminated against for exercising these rights. We do not sell your personal data.

To exercise any of these rights, contact us at privacy@hooksnap.com.

7. International Data Transfers

Your data may be processed outside of Korea by our cloud service providers (Supabase, Google, OpenAI). We ensure appropriate safeguards are in place for international transfers in compliance with GDPR requirements, including standard contractual clauses where applicable.

8. Cookies

We use cookies for:

• Essential cookies: Required for authentication and session management
• Analytics cookies: To understand how users interact with our service (can be disabled)

You can manage cookie preferences through your browser settings.

9. Children's Privacy

Hooksnap is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. Credit balance and rollover data are protected with the same level of security as all other personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the service. The "Last updated" date at the top of this page indicates when this policy was last revised.