LEGAL
Privacy policy
Last updated November 8, 2026
Hook & Sold helps creators, coaches and online businesses see which social posts lead to sales. This policy explains what we collect, why, who we share it with and the choices you have. Hook & Sold is run by Vital Rain Studios LLC, a Texas company doing business as Hook & Sold (“we”, “us”). Questions go to [email protected].
What we collect
Your account
Your email address (we sign you in with an emailed link, so there is no password), your name if you add it, the workspace you create, the teammates you invite, and the brand details you type in, such as your offers, prices and audience.
Accounts you connect
You choose which accounts to connect, and you can disconnect any of them in Settings → Connections. Depending on what you connect and the permissions you approve, we receive:
- Social accounts (Instagram, Threads, Facebook Pages, YouTube, TikTok, LinkedIn): your profile name and handle, your posts and videos, their captions, links and publish dates, their numbers (such as views, reach, likes, comments, shares and saves), comments on your posts and the public names or handles of the people who left them, and follower totals.
- Where you sell (Stripe, Shopify, and course platforms such as Kajabi, Stan, Teachable, Gumroad, ThriveCart and Podia, or anything you send through Zapier or Make): your orders, refunds, products and amounts, and the buyer details the platform includes, usually name and email.
- Email list tools (such as Kit and Mailchimp): list and subscriber counts and the tags or forms you choose to track.
We use access tokens to read this data on your behalf. We keep tokens encrypted in a secure vault and only use them for the features you turned on.
The Hook & Sold website tag
If you add our website tag to your own site, it records what visitors do there: pages viewed, the link or post that brought them, clicks toward checkout and form sign-ups you set up. It keeps a random visitor ID in the visitor’s browser storage, uses no third-party cookies, and honors Global Privacy Control and common consent tools. You are responsible for telling your visitors about it in your own privacy notice and for getting consent where the law requires it.
How you found us
If you arrive at hookandsold.com from a link with a campaign tag, or from another website, our site notes that source (for example “Instagram, launch reel”) in your browser. When you click through to sign up, it goes with you to the app and is saved with your account, so we can see which of our posts and links bring customers. It’s also added to your Stripe checkout. We don’t use it for anything else.
Payments
Payments are handled by Stripe. We receive your billing name, email, address (used for sales tax) and payment status. We never see or store your full card number.
Usage and device information
Basic logs such as IP address, browser type and the time of requests, used to keep the service secure and working.
How we use it
- To run Hook & Sold for you: match your posts to your sales, show your reports, planner and buyer signals, and send the emails you ask for.
- To power AI features you use (see below).
- To bill you, send receipts and handle refunds.
- To answer support requests and tell you about important changes to your account or the service.
- To keep the service secure, prevent abuse and fix problems.
- To improve Hook & Sold using aggregated information that doesn’t identify you or your buyers.
We don’t sell personal information, we don’t share it for advertising, and we don’t use data from your connected accounts to advertise to anyone.
AI features
If your plan includes the AI built in, the parts of your workspace needed to answer a request (for example a post, its numbers or a sale) are sent to our AI provider, Anthropic, to generate the response, under its commercial terms. If you connect your own AI assistant through our MCP connector, the data you ask for goes to that assistant under your own agreement with its provider. AI answers can be wrong, so check them before you rely on them.
Who we share it with
- Service providers who run parts of Hook & Sold for us: Supabase (database and server functions), Cloudflare (website hosting), Stripe (payments and tax), Resend (email) and Anthropic (AI built in). They may only use the data to provide their service to us.
- The platforms you connect, only as needed to fetch your data or carry out an action you asked for.
- Your teammates: people you invite to your workspace can see its data.
- When the law requires it, or to protect the rights, safety or property of our users, the public or us.
- If the business changes hands, as part of a merger, sale or similar transfer, under this policy.
Google and YouTube data
Hook & Sold uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google’s handling of your data is covered by the Google Privacy Policy. You can remove Hook & Sold’s access at any time from your Google account permissions page.
Hook & Sold’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to show you your own channel and video information inside Hook & Sold. We don’t use it for advertising, we don’t sell it, we don’t let people read it except with your permission, for security, or when the law requires it, and we don’t use it to train AI models.
Meta, TikTok and LinkedIn data
Data from Instagram, Threads, Facebook, TikTok and LinkedIn is used only to show you your own accounts, posts, comments and results inside Hook & Sold. You can remove Hook & Sold’s access in each platform’s settings, or disconnect it in Settings → Connections. To have the data deleted, follow the steps on our data deletion page.
How long we keep it
We keep your data while your account is open so your history and reports stay complete. Disconnecting an account stops new data from coming in. If you ask us to delete your account or a connected account’s data, we delete it within 30 days, and it leaves our backups within a further 30 days. We keep billing records for as long as tax and accounting law requires.
Your choices and rights
You can see and change most of your data in the app, and disconnect any account in Settings → Connections. You can also ask us to send you a copy of your data, correct it or delete it by emailing [email protected] from your account email. Depending on where you live (for example California or other US states, the UK or the EU), you may have more rights, such as to opt out of certain processing or to complain to a regulator. We won’t treat you differently for using them. If you are a buyer or visitor of a Hook & Sold customer, contact that business first, since they control that data. We’ll help them respond.
Cookies and storage
The Hook & Sold app uses your browser’s storage to keep you signed in and remember things like your last workspace. This website has no analytics or advertising cookies. It keeps the source of your visit (see “How you found us”) in your browser’s storage, and it loads fonts from Google Fonts, which means Google receives your IP address when the page loads.
Security
We use encryption in transit, encrypted storage for access tokens, access controls on every workspace and the security features of our providers. No system is perfectly secure, so please keep your email account safe, since that is how you sign in.
Children
Hook & Sold is for businesses and isn’t meant for anyone under 18. We don’t knowingly collect data from children.
Where data is stored
We’re based in the United States and our providers store data in the United States. If you use Hook & Sold from elsewhere, your data is transferred to and handled in the US.
Changes
If we change this policy in a way that matters, we’ll update the date above and tell account owners by email or in the app before the change takes effect.
Contact
Vital Rain Studios LLC, doing business as Hook & Sold, Texas, United States. Email [email protected].