Privacy Policy
Last updated: October 19, 2026
Hookworth is operated by Latif Ünal, a sole proprietor based in Antalya, Türkiye, who is the controller of the personal data described here. Questions or requests: hello@gethookworth.com.
What we collect
- Account data — name, email, organisation, login and security information.
- Content — briefs, scripts, footage, images, voices and projects you create or upload, and the videos generated from them.
- Usage data — actions in the product, credit usage, API calls, error logs and basic device information.
- Billing data — handled by Paddle as Merchant of Record. We receive limited information such as your plan, payment status and country, not your full card details.
- Business contact data — for outreach to companies, we may process business contact details (name, role, work email) from public sources and B2B data providers, together with observations about the company’s public ads.
Why we use it
- To provide the service you asked for (contract).
- To secure, maintain and improve Hookworth, and to prevent abuse (legitimate interests).
- To send service messages and, for business contacts, relevant one-to-one outreach about Hookworth (legitimate interests). Every outreach email lets you opt out by replying “no”, and we then stop.
- To meet legal, tax and accounting obligations (legal obligation).
Who we share it with
We use service providers that process data on our behalf, only as needed:
- Paddle — payments, invoicing and tax (Merchant of Record).
- AI generation providers, such as fal.ai (voice, image, video) and Anthropic (language models) — to process content you submit for generation.
- Google Workspace — email; Instantly — outreach email delivery; Apify — collection of public ad and business data.
- Meta Platforms — Instagram API, for the purposes described in “Instagram and Meta data” below.
- Hosting, storage and infrastructure providers, such as Porkbun.
We do not sell personal data. Some providers are located outside Türkiye and the EU; where required, transfers rely on appropriate safeguards such as standard contractual clauses.
Instagram and Meta data
Our app “Hookworth Publisher” connects only to Instagram professional accounts that we own and manage (for example @latify.ai), through Meta’s official Instagram API. It is used to:
- publish our own posts and reels;
- read comments left on our own posts, so that when someone comments a keyword we advertised (for example “KANCA”), we can send that person one private reply with the free resource they asked for;
- read and answer direct messages that people send to our accounts;
- read basic insights (views, reach) for our own posts.
From people who interact with our accounts we process only the Instagram username or scoped ID, the comment or message text, and its time. We use this solely to reply to that person. We do not sell it, use it for advertising, or share it with third parties, and we send at most one automated private reply per keyword request. We keep this data for up to 90 days, then delete it.
Data deletion
To delete the data we hold about you, including Instagram comment and message data, email hello@gethookworth.com with the subject “Delete my data” and your Instagram username, or send “Delete my data” as a direct message to the account you interacted with. We delete it within 30 days and confirm by reply.
How long we keep it
Account and content data is kept while your account is active and for up to 30 days after closure, unless you ask us to delete it sooner. Billing records are kept as long as tax law requires. Outreach contact data is deleted or suppressed when you opt out; we keep a minimal suppression record so we never contact you again.
Your rights
Depending on where you live (including under KVKK in Türkiye and the GDPR in the EU/UK), you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email hello@gethookworth.com. You can also complain to your data protection authority.
Cookies
This website does not use advertising or analytics cookies. If we add any in future, we will update this policy and ask for consent where required. The checkout is provided by Paddle, which may use cookies needed to process payments.
Security
We use encryption in transit, encrypted storage of provider keys, access controls and logging. No system is perfectly secure; we will notify you of a breach affecting your data as required by law.
Data controller and legal basis
Hookworth is operated by Latif Ünal, a sole proprietorship in Antalya, Türkiye, which is the data controller for the personal data described here. We process data to provide the service you signed up for (contract), to meet legal obligations such as tax and accounting, for our legitimate interest in keeping the service secure and improving it, and with your consent where we ask for it. For payment data, our reseller acts as an independent controller.
International transfers
Some of the AI, hosting and payment providers we use are located outside Türkiye, mainly in the EU and the US. Your data is transferred to them only to perform the service, under their contractual data-protection commitments.
AI training
We do not use your videos, audio, scripts or footage to train our own models, and we do not share them with anyone for training purposes.
Children
Hookworth is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Complaints
If you are not satisfied with how we handled your request, you can complain to the Turkish Personal Data Protection Authority (KVKK) or, if you live in the EU or UK, to your local data protection authority.
Changes
We will post updates here with a new date, and notify account holders of material changes.