Hookoh Privacy Policy
Last updated: 31 October 2026
This policy explains how Hookoh (hookoh.com) collects, uses, stores, shares and deletes your information. Hookoh is operated by Bishop Co Tech Limited, a company registered in England and Wales (company number 16240322), 14 Riverside Walk, Ashford TN23 4AR, United Kingdom ("we", "us"). We are the data controller for the personal data described here. Contact us at samuelbines@gmail.com.
1. Information we collect
- Account information: your email address (used to sign you in with a one-time code or link), your name if you add one, plan and billing status.
- Connected social accounts: when you connect Instagram, Facebook, YouTube or TikTok we receive an access token (and refresh token where offered) plus basic profile details for that account: account or channel ID, name, handle and profile picture.
- Content you create or schedule: captions, ideas, media files, schedules and settings you add yourself or through your AI assistant via the Hookoh MCP connector or API.
- Analytics: metrics about your own accounts and posts returned by the platforms, such as views, reach, likes, comments, watch time and follower counts.
- Payments: handled by Stripe. We receive your subscription status and the last digits/brand of your card, never the full card number.
- Technical data: IP address, browser type and request logs, used for security, rate limiting and troubleshooting.
2. How we use information
We use your information only to provide and improve the features you ask for: signing you in, publishing and scheduling your posts, showing previews, posting patterns, expected views and analytics, billing, customer support, security and fraud prevention, and meeting legal obligations. Our lawful bases under UK GDPR are performance of our contract with you, our legitimate interests in running a secure service, and your consent where we ask for it (you can withdraw consent at any time).
3. YouTube API Services and Google user data
Hookoh uses YouTube API Services to let you publish videos to, and read analytics for, the YouTube channels you connect. By connecting YouTube you also agree to the YouTube Terms of Service. Google's privacy policy is at https://policies.google.com/privacy.
We request only these Google OAuth scopes:
https://www.googleapis.com/auth/youtube.upload: to upload the videos you schedule in Hookoh to your channel at the time you choose. We never upload anything you have not scheduled.https://www.googleapis.com/auth/youtube.readonly: to read your channel's name, ID and thumbnail so you can see which channel is connected, and to read the status of videos Hookoh published.https://www.googleapis.com/auth/yt-analytics.readonly: to read view, watch-time and engagement metrics for your channel and videos so Hookoh can show analytics, best posting times and expected views.
Limited Use: Hookoh's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide the user-facing features described above; we do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you; we do not use it for advertising, including personalised, retargeted or interest-based ads; we do not sell it; we do not use it to train generalised AI or machine-learning models; and no person reads it unless you give us permission (for example for support), it is needed for security or to comply with law, or it is aggregated and anonymised for internal operations.
4. Meta (Instagram and Facebook)
If you connect with Meta (Facebook Login for Business) we receive access to the Facebook Pages and Instagram professional accounts you choose. We use it only to publish the posts you schedule, read basic account and post insights, and, if you turn on auto-replies, read and reply to comments and messages on your own accounts. We follow the Meta Platform Terms. Meta's privacy policy: facebook.com/privacy/policy. You can remove Hookoh at any time in Facebook Settings → Business Integrations.
5. TikTok
If you connect TikTok we receive your basic profile information and permission to publish videos you schedule, and to read basic video statistics. We follow TikTok's developer terms. TikTok's privacy policy: tiktok.com/legal/privacy-policy. You can revoke access in the TikTok app under Settings and privacy → Security → Manage app permissions.
6. We do not sell your data
We do not sell, rent or trade your personal data or any data received from Google, Meta or TikTok, and we do not use it for advertising.
7. Who we share data with
We share data only with service providers that help us run Hookoh, under contracts that require them to protect it: DigitalOcean (hosting, London region), Stripe (payments), our email delivery provider (sign-in emails), and, when you ask Hookoh to generate or transform content, the AI and media providers that process that request. We also send your scheduled posts to the platforms you connected, because that is what you asked us to do. We may disclose data if required by law.
8. Storage, security and retention
Data is stored on servers in the United Kingdom (DigitalOcean, London). Access tokens are encrypted at rest and all traffic uses HTTPS. We keep your account data while your account is open. Platform tokens are kept until you disconnect the account or revoke access; cached analytics for up to 24 months; uploaded media until the post is published or deleted plus up to 30 days; server logs for up to 30 days; billing records for as long as the law requires (usually 6 years). When you delete your account we delete or anonymise your data within 30 days, except where the law requires us to keep it.
9. Deleting your data and revoking access
- Disconnect any channel in Hookoh under Accounts; we delete its tokens immediately.
- Revoke Hookoh's Google access at any time at https://myaccount.google.com/permissions (Google Account → Security → Third-party apps & services). Once revoked we can no longer access your YouTube data, and we delete stored Google data within 30 days.
- Revoke Meta access in Facebook Settings → Business Integrations, and TikTok access in TikTok → Settings and privacy → Security → Manage app permissions.
- To delete your whole Hookoh account and data, email samuelbines@gmail.com from your account email. We confirm within 30 days.
10. Your rights
Under UK GDPR you can ask to access, correct, delete, restrict or port your data and object to processing. Email us to do so. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
11. Children
Hookoh is not for children under 13 (or under 16 where local law requires) and we do not knowingly collect their data.
12. Cookies
We use only essential cookies: a session cookie to keep you signed in and a small preference cookie remembering how you last signed in. No advertising or tracking cookies.
13. Changes
We will post changes here and update the date above. For significant changes we will email you.
14. Contact
Bishop Co Tech Limited, a company registered in England and Wales (company number 16240322), 14 Riverside Walk, Ashford TN23 4AR, United Kingdom. Email samuelbines@gmail.com.