Privacy Policy

This Privacy Policy describes how Moritz Rosenthal ("we," "us," or "our"), operating Hookable at Redtenbacherstraße 5, 76133 Karlsruhe, Germany, collects, uses, and shares information about you when you use our AI-powered video captioning and editing service ("Service"). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.

1. Information We Collect

Account Information

When you register for Hookable, we collect account information through Clerk, our authentication provider. This includes:

• Name and email address
• Authentication tokens and session data
• Profile information you choose to provide

Video and Project Content

When you use the Service, we collect and store:

• Videos you upload for processing
• Transcribed caption words, timestamps, and associated metadata generated by AI transcription
• Caption styles, fonts, and visual effects you configure
• Hook overlays and text you create
• B-roll clips and images you upload or select
• Sound effects and background music files
• Export settings and rendered video history
• Project settings and configuration data

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details on our servers. We receive confirmation of payment status and subscription details from Stripe.

Automatically Collected Information

We automatically collect basic usage and technical information, including:

• Error logs and diagnostic information
• Feature usage data (which tools you use within the editor)
• API request logs for security and debugging purposes

We do not currently use any third-party analytics platforms (e.g., Google Analytics).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your uploaded videos and generate AI transcriptions using WhisperX
• Store your projects and enable you to edit and export videos
• Manage your account and subscription
• Process payments through Stripe
• Send transactional communications (export completion, account notifications)
• Debug errors and improve the Service
• Comply with our legal obligations

The legal basis for processing your data is the performance of a contract (Art. 6(1)(b) GDPR) for providing the Service, our legitimate interests (Art. 6(1)(f) GDPR) for security and improvement purposes, and your consent where applicable.

3. Third-Party Services

We use the following third-party services to operate Hookable. Each service has its own privacy policy and data processing practices:

4. Data Storage and International Transfers

Your data is stored primarily within the European Union:

• Database (Supabase): EU region
• File storage (Cloudflare R2): EU region

Some data processing occurs in the United States via Modal (AI transcription and video rendering) and Clerk (authentication). These transfers are covered by Standard Contractual Clauses (SCCs) as required under GDPR Chapter V, providing appropriate safeguards for your personal data.

5. Data Retention

We retain your data for as long as your account is active. Specifically:

• Account and project data is retained while your account is active
• Upon account deletion, all personal data and associated content (projects, videos, transcriptions) is deleted within 30 days
• Payment records may be retained for longer periods as required by applicable tax and accounting law
• Error logs and security logs are retained for up to 90 days

6. Cookies

We use only essential cookies necessary for the operation of the Service:

• Clerk session tokens: required for authentication and maintaining your logged-in state

We do not use marketing, advertising, or analytics cookies. If we add additional cookies in the future, we will update this policy and seek your consent where required.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restriction: Request that we restrict processing of your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority. In Germany, you may contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

8. Age Restriction

Hookable is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal data, please contact us at [email protected] and we will take steps to delete such data promptly.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. See our Security Policy for details on our technical security measures. While we take reasonable precautions, no system is completely secure and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. For significant changes affecting your rights, we will also notify you by email. Your continued use of the Service after the changes become effective constitutes acceptance of the revised policy.

11. Contact

For any questions or concerns about this Privacy Policy or our data practices, contact: