← Home

Gum Hook — Privacy Policy

Effective date: August 5, 2026

1. Who we are

Gum Hook (“we”, “us”) provides tools to design social posts, carousels, tweet-style graphics, and scheduled publishing. This policy explains what we collect and how we use it.

2. Information we collect

  • Account data — email, name, and authentication identifiers when you sign up.
  • Content you create — templates, captions, images, videos, and schedules you upload or generate.
  • Connected accounts — OAuth tokens and profile metadata from platforms you connect (Instagram, TikTok, LinkedIn, YouTube, Bluesky, Google Business, etc.).
  • Payment data — billing is handled by Stripe. We store your plan, Stripe customer id, and subscription status — not full card numbers.
  • Usage & diagnostics — basic logs, errors, and feature usage to keep the service reliable.

3. How we use information

  • Authenticate you and maintain your session.
  • Render, export, and publish content you request.
  • Run AI-assisted features (hooks, captions, image generation) using third-party AI providers.
  • Process subscriptions and enforce plan limits (including free-trial export limits).
  • Improve the product and prevent abuse.

We do not sell your personal information.

4. Third-party services

We use Supabase (auth & database), Stripe (payments), cloud storage (e.g. R2), and AI/media providers (OpenRouter, Fal, Vertex, Unsplash, Pexels, etc.). Connected social platforms receive only the content and permissions you authorize.

5. Cookies

We use essential cookies for login sessions. Theme preference may be stored in local storage. We do not use third-party advertising cookies.

6. Data retention

  • OAuth tokens remain until you disconnect an integration.
  • Created content remains until you delete it or close your account.
  • Account data is deleted within 30 days of a verified deletion request.

7. Your rights

You may access, correct, or delete your data by contacting support@gumhook.com. You can revoke third-party access in each platform's settings at any time.

8. Security

Traffic is encrypted (HTTPS). Access tokens are stored in protected infrastructure and are not shared with other users. Payment card data is processed by Stripe under PCI DSS standards.

9. Children

Gum Hook is not directed at children under 13. We do not knowingly collect data from children.

10. Changes

We may update this policy. Material changes will be posted here with a new effective date.

11. Contact

Questions: support@gumhook.com