Privacy Policy

1. Data Controller

Hooksnap [Operated by Fikad Inc.] is the data controller for the personal information we collect. For privacy-related inquiries, contact us at privacy@hooksnap.com.

Note: Polar acts as our Merchant of Record and separately processes payment data according to their own privacy policy.

Data Protection Officer: Dan Kim, dan@fikad.boo

2. Data We Collect

3. How We Use Your Data

We use your data to:

• Provide and operate the Hooksnap service
• Process payments through our payment provider (Polar)
• Send service-related communications (account updates, important notices)
• Improve and develop our product
• Comply with legal obligations

Legal basis: We process your data based on contract performance (providing the service), legitimate interests (improving our product), and legal compliance where required.

4. Data Sharing

We share data with the following third parties only as necessary to provide our service:

• Polar — Payment processing and invoicing
• Supabase — Database and file hosting
• Google / OpenAI — AI processing for thumbnail generation

We do not sell your personal data.

5. Data Retention

• Account data: Retained until you delete your account
• Generated thumbnails: Until you delete them, or 1 year after account closure
• Server logs: 90 days
• Method of destruction: Electronic data is permanently deleted using technical methods that make it irrecoverable. Paper documents, if any, are shredded.

6. Your Rights

Under GDPR (EU) and PIPA (Korea), you have the right to:

• Access — Request a copy of your personal data
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your data ("right to be forgotten")
• Portability — Request your data in a portable format
• Withdraw consent — Withdraw consent where processing is based on consent
• Complaint — Lodge a complaint with a supervisory authority

California Residents: Under CCPA/CPRA, you have the right to opt-out of the sale/sharing of personal data, request deletion, and not be discriminated against for exercising these rights. We do not sell your personal data.

To exercise any of these rights, contact us at privacy@hooksnap.com.

7. International Data Transfers

Your data may be processed outside of Korea by our cloud service providers (Supabase, Google, OpenAI). We ensure appropriate safeguards are in place for international transfers in compliance with GDPR requirements, including standard contractual clauses where applicable.

8. Cookies

We use cookies for:

• Essential cookies: Required for authentication and session management
• Analytics cookies: To understand how users interact with our service (can be disabled)

You can manage cookie preferences through your browser settings.

9. Children's Privacy

Hooksnap is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the service. The "Last updated" date at the top of this page indicates when this policy was last revised.