Privacy Policy

Last updated: October 12, 2026.

AIVideoHook ("we", "us" or "our") respects and protects your privacy. This Privacy Policy (the "Policy") explains how we collect, use, store, and share your personal information when you use https://aivideohookgenerator.com (the "Service"), and the rights you have under the law.

Please read this Policy carefully before using the Service. By using the Service, you confirm that you have read and agree to this Policy. We may update this Policy from time to time; if we make material changes, we will notify you in advance by email.

1. Data controller

The data controller for the Service is:

2. Personal information we collect

2.1 Information you provide

  • Account information: name, email address, and password (stored as an irreversible hash — we do not keep plaintext passwords).
  • Payment information: transaction amount and payment status. We do not store full card numbers — card data is processed by our payment processor (see Section 5).
  • Communications: emails, tickets, and feedback you send to support.
  • Content you submit: the topic and text you enter when using the generation features, plus the hooks, scripts and storyboards, and image and video prompts the Service generates for you. This content is stored in association with your account so that you can view your generation history.

2.2 Information we collect automatically

  • Device and network: IP address, device model, operating system, and browser type.
  • Usage: page views, feature use, activity logs, session duration.
  • Log data: request times, error logs, performance data.
  • Third-party sign-in: when you sign in through Google or similar, we receive the email address and basic profile information within the scope you authorise, and we store the access token and refresh token issued by Google (used to keep you signed in). We never receive your Google password.

3. How we use your personal information

Purpose Legal basis
Providing and maintaining the Service Performance of a contract
Billing and payment processing Performance of a contract
Customer support Performance of a contract / Legitimate interests
Service notices (billing, security, policy updates) Legitimate interests
Security and fraud prevention Legitimate interests
Product improvement and analytics Legitimate interests
Legal compliance Legal obligation

We may aggregate or de-identify data for statistical analysis. Such data cannot be traced back to a specific individual.

4. Cookies and tracking technologies

Type Purpose Can be disabled
Strictly necessary Keeping you signed in, core functionality No
Analytics Anonymous usage statistics, product improvement Yes

Analytics tool we use: Google Analytics — privacy policy: https://policies.google.com/privacy. You can adjust your preferences through your browser settings.

5. Sharing and disclosure of personal information

We do not sell your personal information, including as "sale" is defined under applicable law (such as the CCPA). We share your information only in the following cases:

  • Service providers: cloud computing, AI models, payments, email delivery, customer support, and analytics vendors, bound by confidentiality agreements. Content you submit is sent to our AI model providers (including OpenAI, Anthropic, Google, Cloudflare, and DeepSeek) to generate results. Payment card data is processed exclusively by our PCI-DSS certified payment processor (Waffo Pancake) and is not stored on our servers.
  • Legal and regulatory requirements: where required by law, by a court order, or by a lawful request from a competent authority.
  • Business transactions: in the event of a merger or acquisition, with advance notice and continued protection obligations.
  • With your consent: for other purposes, on the basis of your prior express consent.

6. Data security

  • Encryption in transit: TLS / HTTPS.
  • Storage security: sensitive data such as passwords is encrypted or hashed.
  • Access control: least-privilege principle; staff sign confidentiality agreements.
  • Regular security audits and vulnerability scanning.

If a security incident affects your rights, we will notify you and the relevant regulators as required by law within 72 hours of discovery. Please keep your account credentials safe and do not share them.

7. Retention of personal information

Data type Retention period On expiry
Account information While the account is active; 1 year after closure Deleted or anonymised
Transaction records As required by law, usually 1 year Deleted or archived
Support records 1 year Securely deleted
Security audit logs 3 months Securely deleted

After your account is cancelled, your data remains recoverable for 90 days; after that it enters the deletion process, and deletion is completed within no more than 1 year.

8. Your data rights

To exercise any of the rights below, contact us. We will process your request within 30 calendar days.

Right What it means
Right to be informed Learn what data we collect and how we use it
Right of access Obtain a copy of your personal information
Right to rectification Correct inaccurate or incomplete information
Right to erasure Request deletion of your data under certain conditions
Right to restrict processing Pause processing of your data in certain circumstances
Right to data portability Receive your data in a machine-readable format
Right to object Object to processing based on legitimate interests or for marketing
Right to withdraw consent Withdraw consent you have given for processing

If you believe we have handled your data improperly, you have the right to complain to your local data protection authority.

9. Marketing communications and opting out

With your consent, we may send you marketing messages about product upgrades, new features, and offers by email, SMS, or in-app notifications. You can opt out at any time: click the "unsubscribe" link in an email, or contact us. Opting out does not affect essential service notices (such as billing and security alerts).

10. Cross-border data transfers

Our servers and partners may be located in Singapore, the United States, or China. When data is transferred across borders, we protect it by:

  • signing data processing agreements that incorporate the EU Standard Contractual Clauses (SCCs);
  • transferring only to recipients that provide an equivalent level of protection.

11. Protection of minors

The Service is for users aged 18 and over. We do not knowingly collect information from minors below that age. If you believe your child has provided us with information, contact us immediately and we will delete it as soon as possible.

12. Third-party links and services

The Service may contain third-party links or integrate with third-party services. This Policy applies only to information we collect directly. We are not responsible for third parties' data practices, and we recommend reviewing their policies before use.

13. Changes to this Policy

If we make material changes, we will notify you at least 30 days in advance through a platform announcement or the email address on your account, and update the "Last updated" date at the top of this page. Continuing to use the Service after the effective date means you accept the changes.

14. Contact us