Last updated
Privacy policy
This explains what Hookquill collects when you use it, why, who helps us process it, and how long we keep it. The short version: we store what you need to write your scripts, we do not sell it, and we do not train AI models on it.
Who we are
Hookquill is an AI script-writing tool for YouTube creators, operated by Hookquill, a sole proprietorship (“we”, “us”). This policy covers our website and the Hookquill app. For any privacy question or request, email support@hookquill.com.
What we store
- Account details. Your email address, and your name and profile picture if you sign in with Google.
- Your scripts and everything around them. Scripts and their version history, ideas, outlines, reviews, titles and descriptions, video analyses, voice profiles, your questionnaire answers, and any text or files you add as material or sources.
- AI inputs and outputs. For every AI action we store what was sent to the model, what came back, which model was used, and how many credits it cost. We also record when you accept, reject or rewrite an AI suggestion, and use that to make Hookquill’s writing better. It is never used to train an AI model.
- YouTube data. Public information about channels you add (yours or ones you admire): channel details, video titles, descriptions, durations, view counts and captions. See “YouTube data” below.
- Billing records. Your plan, credit balance and purchase history. Card details are collected by Polar, not by us.
- Product analytics. Which pages and features you use, events such as creating or exporting a script, and technical details like browser, device type and approximate location derived from your IP address. Where enabled, this includes session recordings of how you use the interface. We also collect error reports so we can fix bugs.
How we use it
- To run the product: build your profile, write and store your scripts.
- To meter and bill usage through credits.
- To send sign-in links and messages about your account.
- To understand which features work, find bugs, and prevent abuse.
- To meet legal obligations, such as keeping billing records.
We do not train AI models on your content
We do not use your scripts, profiles, uploads or AI outputs to train AI models, ours or anyone else’s, and we do not sell them. When you run an AI action, the text needed for it is sent to the provider that runs the model you chose (ModelScope for the Qwen models behind Auto, Anthropic for Claude, OpenAI for GPT) only to generate your result.
YouTube data
Hookquill uses YouTube API Services to read public channel and video information. By using features that access YouTube, you also agree to the YouTube Terms of Service, and Google’s handling of that data is covered by the Google Privacy Policy.
- We use it only to build your voice profile, suggest ideas, and analyze videos you choose.
- Captions of public videos are read from YouTube directly. If that fails, a backup provider (Supadata) fetches the same public captions.
- We keep cached YouTube data for at most 30 days, after which it is refreshed or deleted. The full text of AI requests, which can contain caption excerpts, is cleared after 30 days as well.
- We show YouTube’s own figures, such as view counts, and never invent scores from them.
- We never post, comment or change anything on YouTube.
If you signed in with Google, you can revoke Hookquill’s access at any time from your Google security settings.
Voiceovers
- Voiceovers are read by Fish Audio’s studio voices. Hookquill does not record, collect or clone anyone’s voice.
- The script text is sent to Fish Audio to make the audio. The audio file is stored in your account until you delete it, or your account.
- Deleting your account deletes every voiceover file within 7 days.
Who processes data for us
We use these providers to run Hookquill. Each receives only what it needs for its job.
- Supabase
- Database, sign-in and file storage. Holds your account and content.
- Vercel
- Hosts and serves the website and app.
- ModelScope (Alibaba Cloud)
- AI model provider for the Qwen models behind Auto. Receives the text needed to generate an output.
- Anthropic
- AI model provider (Claude). Receives the text needed to generate an output.
- OpenAI
- AI model provider (GPT). Receives the text needed to generate an output.
- Tavily
- Web search for the research step. Receives search queries about your video topic, never your account details.
- Fish Audio
- Voiceovers. Receives the script text to read, never your account details.
- Supadata
- Backup for fetching captions of public YouTube videos, used only when YouTube cannot be reached directly.
- Polar
- Merchant of record. Runs checkout, billing, invoices and sales tax.
- Resend
- Sends sign-in links and account email.
- PostHog
- Product analytics and error tracking.
- Google Analytics
- Website traffic statistics. Before you sign in it sets no cookie.
- Cloudflare
- DNS, content delivery and bot protection (Turnstile).
These providers may process data outside the country you live in. We may also disclose information if the law requires it.
How long we keep it
- Your scripts, versions, profiles, ideas and AI outputs: for as long as your account exists.
- Cached YouTube data, and the full text of AI requests: at most 30 days.
- Billing records: as long as tax and accounting law requires.
When you delete your data, we delete your account and everything in it straight away. Voiceover audio files follow within 7 days. Copies in encrypted backups expire on our database provider’s normal backup schedule. The data deletion page explains exactly what is removed.
Cookies
We use a cookie to keep you signed in and, once you are signed in, analytics cookies (PostHog and Google Analytics) to understand how the product is used. Visitors who are not signed in get no analytics cookie. A link with an offer or an affiliate's code remembers it in a cookie for 60 days, so the discount still applies when you sign up. Cloudflare Turnstile tells people from bots on email sign-in and the free tools.
Your choices and rights
- Export your scripts at any time as Markdown or PDF.
- Correct your profile and account details in the app.
- Delete everything from Settings → Delete my data.
- Ask us for a copy of your data, or object to how we use it, by emailing support@hookquill.com.
Depending on where you live, you may have further rights under local law, including the right to complain to your data protection authority.
Security
Data is encrypted in transit and at rest. Every workspace is isolated at the database level, so one account cannot read another’s data. Uploaded files are stored under random names and served only through expiring links.
Children
Hookquill is not meant for anyone under 13, or under the minimum age for online services where they live. We do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell signed-in users by email or in the app before the change takes effect.

