Privacy Policy
Last updated: 20 Nov 20251. Overview and scope
This Privacy Policy explains how Hook Lab collects, uses, and shares information when you use our service, including when you connect your YouTube account through YouTube API Services. This policy forms part of the Hook Lab Terms of Service. By using Hook Lab, you agree to this policy. Data obtained from YouTube API Services is also subject to:YouTube Terms of Service: https://www.youtube.com/t/terms
Google Privacy Policy: https://www.google.com/policies/privacy
The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.2. What we collect
2.1 Account data
Account data: name, email address, password hash, role, and basic preferences such as language and notification settings.2.2 Profile data
Profile data: role specific fields you provide, such as links, descriptions, avatars, and other profile information you choose to share.2.3 Analytics imports
Analytics imports: data you upload, for example CSV exports from YouTube Studio or other tools. Revenue and other sensitive metrics are optional and private by default unless you choose to share them inside Hook Lab.2.4 Connected YouTube account data (YouTube API Services)
If you connect a YouTube channel, we receive certain data from YouTube API Services after you grant permission through your Google account. Depending on the scopes you approve, this can include:
Identifiers such as channel IDs, video IDs, and playlist IDs. Channel and video metadata such as titles, descriptions, thumbnails, tags, categories, and publish dates. Performance metrics and statistics that YouTube makes available through its APIs, such as views, watch time, average view duration, audience retention metrics, impressions, click through rates, subscribers, likes, comments, and similar fields. Information about playlists or other resources you authorise us to access.We do not access YouTube data outside the scopes and permissions that you approve.
2.5 Usage and technical data
Usage data: logs about how you use Hook Lab, including feature usage, timestamps, requests, and error logs. Technical data: basic information such as IP address, browser type, device type, and configuration, usually in aggregated or pseudonymised form.3. How we use data
We use the information described above to:
Provide and operate features such as profiles, dashboards, scoring, matching, analytics views, and workflow tools. Show you insights and visualisations based on your own data and settings, including YouTube data where authorised. Maintain and improve reliability, performance, and usability. Prevent fraud, abuse, and security incidents and protect our users and the service. Comply with legal obligations and enforce our Terms.For YouTube data specifically, we use it only:
For user facing features in Hook Lab that you choose to use, where the purpose is clear in the interface and in this policy. For security, abuse detection, and compliance where required by YouTube or applicable law.We do not use YouTube API Data to create new or derived data or metrics or to replace YouTube metrics.
4. Sharing
We do not sell personal data or YouTube API Data.
We share data only in these situations:
With your direction or consent for example when you choose to publish a profile, invite collaborators, or share a view. With service providers that help us run the service, such as hosting, storage, monitoring, analytics, and email providers. These providers act under written agreements and may not use the data for their own independent purposes. When required by law legal process, or to protect rights, property, or safety.We do not transfer YouTube API Data to advertisers, data brokers, or similar third parties, and we do not use YouTube API Data for targeted advertising, profiling for ads, or creditworthiness assessments.
5. YouTube API Services specific information
5.1 Use of YouTube API Services
Hook Lab uses YouTube API Services when you connect a YouTube channel or otherwise authorise us to access YouTube data.
We access and use that data only in accordance with:
The scopes and permissions you approve. This Privacy Policy and our Terms of Service. YouTube API Services Terms of Service and Developer Policies. Google API Services User Data Policy.5.2 Limited use and human access
Our use of YouTube API Data is limited to providing or improving user facing features that are prominent in Hook Lab’s interface or to required security and legal purposes.
We do not allow humans to read YouTube API Data except:
When you ask us to look at specific data for support or troubleshooting. When necessary to investigate bugs, abuse, or security issues. When required by law. When data is aggregated or anonymised for internal operations.Any such access is limited to authorised staff under confidentiality obligations.
5.3 Derived metrics and non YouTube metrics
We do not use YouTube API Data to create new or derived data or metrics or to replace YouTube metrics. We may display information, scores, or metrics that are not based on YouTube API Data, for example planning scores, labels, or other measures derived from your own inputs or from non YouTube data sources. If we display such non YouTube information alongside YouTube data:We will clearly label it as not from YouTube and as part of Hook Lab’s own product.
We will not calculate those values using YouTube API Data as an input.
5.4 Storage, caching, and retention of YouTube data
We may store authorisation tokens while your connection remains active so we can refresh data and keep your views up to date. We use these tokens only for purposes consistent with your consent. We may store certain analytics and reporting statistics that YouTube allows to be stored, while we have valid authorisation and only for purposes described here. For other YouTube API Data we follow YouTube’s rules on refreshing, caching, and deleting data, which include:Periodically confirming that authorisation is still valid and that content has not been deleted.
Deleting or refreshing stored YouTube API Data within the time frames required by YouTube Developer Policies, including deleting or anonymising revoked YouTube API Data within 7 calendar days where those policies require this.
If you disconnect your YouTube channel inside Hook Lab or revoke access in your Google account, we stop requesting new YouTube data for that connection and delete or anonymise stored YouTube API Data associated with that connection as soon as reasonably possible and in any case within 7 calendar days, in line with YouTube policies and applicable law.
5.5 Revocation and deletion controls
You can revoke Hook Lab’s access to your YouTube data at any time:
In Hook Lab, by using the disconnect or remove channel option where provided. In your Google account security settings, for example:https://myaccount.google.com/permissions
https://myaccount.google.com/connections
When you disconnect inside Hook Lab:
We programmatically revoke the applicable tokens as soon as reasonably possible. We delete or anonymise associated YouTube API Data we store as soon as reasonably possible and in any case within 7 calendar days, in line with YouTube policies and applicable law.When you revoke access in your Google account:
We periodically check whether our authorisation tokens are still valid. We treat a failed refresh or revoked token as a revocation event and delete or anonymise related stored YouTube API Data as soon as reasonably possible and in any case within 7 calendar days, in line with YouTube policies and applicable law.Deleting data from Hook Lab does not delete data on YouTube. To change or delete your content on YouTube you must use YouTube or another authorised client.
5.6 Third party content and advertisements
Hook Lab does not serve third party advertisements that use YouTube API Data. If in the future we allow third parties to serve content or advertisements in areas that show YouTube data, we will:Update this Privacy Policy before enabling those features.
Clearly disclose which content is advertising or third party content.
Ensure that YouTube API Data is handled according to YouTube and Google policies.
6. Cookies and similar technologies
We and our service providers use cookies, local storage, and similar technologies to:Run the service and keep you signed in.
Remember preferences and settings.
Measure usage and performance.
Embedded YouTube players and other Google services may set their own cookies or similar technologies according to Google’s policies. These may be used for purposes such as fraud prevention, analytics, and personalisation on Google’s side.You can control cookies through your browser settings and, where available, through any consent tools we provide. If you disable certain cookies, some features may not work correctly.
7. Data retention and deletion
We keep data for as long as necessary to provide the service, operate our business, satisfy legal obligations, and resolve disputes. In particular:Account and profile data is kept while your account is active and for a reasonable period after closure for audit, security, and legal purposes.
Analytics imports and other uploaded content are kept while needed for the features you use or until you delete them.
YouTube API Data is kept only while we have valid authorisation and only for purposes described in this policy, and is refreshed or deleted according to YouTube Developer Policies, including the requirement to delete or anonymise revoked YouTube API Data within 7 calendar days where those policies require this.
You can request deletion of your account and associated data by contacting privacy@hooklab.co.uk, or by using in product deletion controls where available. We will delete personal data that we are not required to retain for legal, security, or audit reasons within a reasonable time and in line with YouTube and Google requirements where applicable.
8. Security
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, misuse, alteration, or destruction, including access controls and encryption in transit. No method of transmission or storage is completely secure. You are responsible for keeping your credentials confidential and for notifying us promptly if you suspect unauthorised access to your account.9. International transfers
We may process data outside your country of residence. Where required, we use appropriate safeguards such as standard contractual clauses or equivalent measures to protect your rights under applicable data protection law.10. Your choices and rights
You can:
Update most account and profile information in Hook Lab. Control what you upload or import, including whether to include revenue and other sensitive fields. Disconnect your YouTube channel in Hook Lab where that option is provided. Revoke Hook Lab’s access to your YouTube data in your Google account settings at:https://myaccount.google.com/permissions
https://myaccount.google.com/connections
Request access to or deletion of your personal data by contacting privacy@hooklab.co.uk.We may ask you to verify your identity before acting on certain requests. Your rights may be subject to limits under applicable law.