Last updated · April 20, 2026

Privacy Policy

This Privacy Policy describes how HookedOnAds (“we,” “our,” or “us”) collects, uses, and shares information when you use our SaaS tool for generating ad angles, hooks, copy, creatives, and campaign structures. By using the service you agree to this policy.

1. Information we collect

Account data. Email, name, and authentication data you provide via signup (email + password). We use Supabase Auth to store credentials — passwords are hashed and never stored in plain text.

Product and generation data. Product profiles, generation briefs, outputs, and uploaded media files (images and videos) are stored in Supabase Storage and Postgres. This content is private to your account — only you and authorized administrators can access it.

Usage and telemetry. We log per-module generation events (module name, token counts) to compute your daily plan usage and improve the product. We do not sell this data.

Support and contact data. When you contact us via the contact form we store the message, your name/email, and a hashed IP signature to detect spam.

2. How we use your data

  • Operate the service and deliver generation results.
  • Enforce plan limits and bill for paid plans.
  • Send transactional emails (confirmations, billing, support).
  • Prevent abuse and secure the platform.
  • Aggregate, non-identifying analytics to improve model prompts and UX.

3. Third-party services

We use the following sub-processors to operate the service. Your content passes through each only as needed:

  • Supabase — authentication, database, and file storage.
  • OpenAI— prompt execution. Submitted inputs are processed under OpenAI's API data policies and are not used to train their models.
  • Hostinger (or the hosting provider in use) — application hosting.

4. Data retention

Generation history, products, and media remain in your account until you delete them. If you close your account, we delete your personal data within 30 days unless retention is required by law.

5. Your rights

You can request access to, correction of, or deletion of your personal data by emailing us via the contact form. We honor GDPR and CCPA rights where applicable.

6. Security

All data is encrypted in transit (TLS). Supabase enforces row-level security so users can only read and write their own rows. Admin access is restricted and audited via an internal admin event log.

7. Children

HookedOnAds is not intended for users under 18. We do not knowingly collect data from minors.

8. Changes to this policy

We will post any material changes to this policy on this page with a new “Last updated” date. Continued use of the service after changes constitutes acceptance.

9. Contact

Questions about privacy? Reach out via our contact page.