Privacy Policy

This Privacy Policy explains how Ethena Ltd ("we", "us"), operator of Hookly (hookly.studio), collects and uses your personal data. We are the data controller. If you have any questions, contact us at support@hookly.studio.

Data we collect

• Account data — your email address and authentication details when you sign up and log in.
• Usage data — your credit balance, generations you run, and basic technical information (such as browser type) needed to run the Service.
• Content you provide — the product images, prompts and text you upload or enter to generate content.
• Payment data — handled by our payment provider Paddle. We do not see or store your full card details; we receive confirmation of purchases and the email associated with them.

How we use your data

• To provide and operate the Service (create your account, generate content, track credits).
• To process purchases and add credits to your account (via Paddle).
• To respond to support requests and communicate service-related information.
• To maintain security and prevent abuse.

Our lawful bases are performance of our contract with you (providing the Service), our legitimate interests (security, improving the Service) and, where required, your consent.

Service providers we share data with

We use trusted third parties to run Hookly, and share only what is necessary:

• Supabase — account authentication and database (stores your email and credit balance).
• Vercel — website and server hosting.
• Google (Gemini API) — generates the images and text from your prompts and uploads.
• Paddle — our Merchant of Record; processes payments, tax and invoicing.

Some of these providers are based outside the UK/EEA (for example, in the United States). Where data is transferred internationally, it is protected by appropriate safeguards such as standard contractual clauses.

Cookies and local storage

We use browser local storage to keep you logged in and to remember your settings. We do not use advertising or third-party tracking cookies. Paddle may set cookies necessary for secure checkout.

Data retention

We keep your account data for as long as your account is active. You can ask us to delete your account and associated personal data at any time (some records may be retained where required for legal or accounting reasons).

Your rights

Under UK GDPR you have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email support@hookly.studio. You also have the right to complain to the UK Information Commissioner's Office (ICO).

Security

We take reasonable technical and organisational measures to protect your data. Passwords are handled by our authentication provider and stored securely; sensitive keys are held server-side, never in your browser.

Children

Hookly is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes

We may update this policy; material changes will be shown by updating the date above.