Privacy Policy

Rojus Zekonis, trading as The Hook Playbook, is the controller responsible for personal data handled through https://thehookplaybook.com and https://app.thehookplaybook.com. Our correspondence address and contact email appear at the end of this page.

Depending on how you use the service, we may collect:

• Account data: email address, authentication status and basic profile details.
• Creator inputs: niche, audience, tone, topics, prompts and other information you choose to enter.
• Service content: AI outputs, saved projects, library activity and generation usage.
• Billing data: Stripe customer, subscription and payment-status identifiers. We do not receive or store your full card number.
• Support data: messages, issue details and correspondence you send us.
• Technical and security data: session, request, device and security information needed to run and protect the service.

Please do not enter passwords, payment-card details, health records, identity documents or other highly sensitive information into the AI tools.

We do not intentionally collect special-category personal data. If you submit it despite this instruction, contact us so we can assess and remove it where appropriate.

• To create and secure your account, provide the dashboard and deliver AI generations under our contract with you.
• To process subscriptions, reconcile access and keep billing records under our contract and legal obligations.
• To answer support requests and protect the service against fraud, abuse and technical failures based on our legitimate interests.
• To diagnose, maintain and improve reliability using limited operational data based on our legitimate interests.
• To comply with tax, accounting, legal and regulatory duties.

We will rely on consent before sending optional marketing where consent is required. The current app does not use third-party advertising or behavioural analytics cookies.

When you use an AI tool, the information needed for that request is sent to Anthropic so it can generate the result. You are responsible for having the right to submit the material you provide and for checking each output before publishing or relying on it.

The toolkit supports content planning; it does not make decisions producing legal or similarly significant effects about you. We do not sell your prompts or outputs.

We use carefully selected providers to operate the service:

• Supabase for authentication and database services.
• Anthropic for AI generation.
• Stripe for subscription billing and the customer billing portal.
• Resend for authentication and account emails.
• Vercel for application hosting and delivery.

We share only what each provider needs to perform its service. We may also disclose data where required by law, to protect rights or security, or as part of a genuine business transfer subject to appropriate safeguards.

Some providers may process information outside the United Kingdom. Where UK data protection law requires it, we rely on recognised transfer mechanisms or other appropriate safeguards supplied by those providers. Contact us if you would like more information about the safeguards relevant to your data.

We keep account, project and usage data while your account exists and for only as long afterwards as needed for deletion, recovery, security, dispute or legal purposes. A valid deletion request is normally completed within 30 days.

Some billing, transaction, tax, fraud-prevention, security and audit records may be retained longer where the law or a genuine dispute requires it. Provider backups may expire on their normal secure rotation schedule rather than disappearing instantly.

The app currently uses only cookies or similar storage necessary for account sessions, authentication, security and core service operation. We do not currently use advertising or third-party behavioural analytics cookies, so no optional-cookie banner is shown. Stripe-hosted pages operate under Stripe's own privacy and cookie information. See our Cookie Noticefor a plain-language breakdown.

We use access controls, row-level database security, encrypted connections and server-side credential handling. No online service can promise absolute security, so please use a unique password and contact us promptly if you suspect unauthorised access.

Subject to applicable law, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent where we rely on it. Email thehookplaybook1@gmail.com. We may need to verify your identity before acting.

You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to address your concern first.

For the practical account-removal process, see our Account & Data Deletion page.

The service is not intended for anyone under 18.

We may update this policy when the service, providers or legal requirements change. We will update the date above and give appropriate notice of material changes.