Privacy Policy

1. Who we are

Hooklink (“Hooklink”, “we”, “us”, “our”) provides an Instagram engagement-automation platform that lets creators and businesses turn comments, story replies and direct messages into automated conversations, captured leads and follower growth using Meta's official APIs.

This Privacy Policy explains what information we collect when you use our website and application (the “Service”), how we use it, who we share it with, and the choices and rights you have. By using the Service you agree to this policy.

2. Information we collect

Information you provide

• Account information — your name and email address when you sign up (we use passwordless email one-time codes; we do not store a password for normal accounts).
• Support information — the contents of tickets, contact-form messages and any attachments or details you share with our team.
• Payout details — when you request a referral payout, the UPI ID or bank details you supply for that payout.

Instagram / Meta data (when you connect an account)

• Your Instagram professional account profile — username, account ID, name and profile picture.
• A long-lived access token issued by Meta, which we store encrypted and use only to operate the automations you configure.
• Content needed to run your automations — comments, story replies, mentions and direct messages that match your triggers, and the messages we send in response.
• Leads and follower-growth events your automations capture (for example an email or phone number a user provides in a DM, where you have enabled lead collection).

Payment information

Subscription payments are processed by our payment provider, Razorpay. We do not collect or store your full card or bank-account numbers. We retain a record of your subscription status, plan, payment identifiers and amounts.

Usage & technical data

• Log and device data such as IP address, browser type and timestamps, used for security, rate-limiting and debugging.
• Product analytics about how features are used, to improve the Service.

3. How we use your information

• To provide, operate and maintain the Service and the automations you create.
• To connect to your Instagram account through Meta's APIs and deliver messages within Meta's rate limits and messaging windows.
• To process subscriptions, billing and referral earnings/payouts.
• To respond to your support requests and send service-related communications.
• To protect the Service against fraud, abuse and security threats.
• To comply with legal obligations and Meta's Platform Terms and Developer Policies.

4. Instagram and Meta Platform data

Our use and transfer of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements. We only request the permissions necessary to operate the features you enable.

• We use Instagram data solely to provide and improve the automation features you have configured.
• We do not sell Instagram data, and we do not use it for advertising or to build profiles unrelated to the Service.
• We store the minimum data needed to operate your automations, and access tokens are encrypted at rest.
• You can disconnect an Instagram account at any time, which deletes the stored access token for that account.

5. How we share information

We do not sell your personal information. We share it only as needed to run the Service:

• Meta Platforms — to operate Instagram automations through their official APIs.
• Razorpay — to process payments and recurring billing.
• Infrastructure and email providers (hosting, database, transactional email) that process data on our behalf under appropriate confidentiality obligations.
• Legal and safety — where required by law, regulation, legal process, or to protect the rights, property or safety of Hooklink, our users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. Access tokens are removed when you disconnect an account. When you delete your account we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (for example billing records) to meet legal or accounting obligations.

7. Data security

We use technical and organisational measures to protect your data, including encryption of Instagram access tokens at rest, encrypted transport (HTTPS), access controls and rate-limiting. No method of transmission or storage is completely secure, but we work to protect your information and to address vulnerabilities promptly.

8. Your rights and choices

• Access and correction — view and update your account details from Settings.
• Disconnect — remove a connected Instagram account at any time from Settings.
• Deletion — delete your account, or request deletion via our data-deletion page or by contacting support.
• Communication preferences — service emails are required while you have an account; you can opt out of non-essential emails.

Depending on where you live, you may have additional rights under applicable law (for example India's Digital Personal Data Protection Act). To exercise any right, contact us using the details below.

9. Cookies

We use essential cookies to keep you signed in and to secure the Service. We may use limited analytics cookies to understand product usage. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have questions or requests about this policy or your data, email hooklinkadmin@gmail.com or use our contact page.