Privacy Policy

1. Who we are

Link Hooker is a Progressive Web App (PWA) for saving and organising links, with an optional Task Manager available on the Pro+ plan. It is operated by Harshal Saraf, based in India. You can reach us at mylinkhooker@gmail.com.

2. What data we collect

We collect the minimum data needed to provide the service:

• Account data: your email address and basic profile information (display name, profile photo URL if provided) when you sign in with Google, GitHub, or Email/Password.
• Content data: the URLs, titles, descriptions, thumbnails, notes, folder names, and task data you save to your account.
• Usage data: basic analytics to understand how the product is used (for example, feature usage frequency). We do not track individual browsing activity outside Link Hooker.
• Payment data: if you subscribe to Pro or Pro+, your payment is processed by Razorpay. We do not store your card number, bank details, or any raw payment credentials. We receive a transaction ID and subscription status from Razorpay to manage your plan.

3. How we use your data

• To provide and maintain the Link Hooker service.
• To authenticate your identity and manage your account.
• To process your subscription and verify your plan tier.
• To send transactional emails (for example, email verification or password reset) via Firebase Authentication. We do not send marketing emails without your consent.
• To improve the product based on aggregated, anonymised usage patterns.

4. Third-party services we use

• Google Firebase (Authentication and Firestore database) - hosts your account and content data. Firebase stores data in Google Cloud infrastructure. See Google's privacy policy at policies.google.com/privacy.
• Razorpay - processes payments for Pro and Pro+ subscriptions. Razorpay handles PCI-DSS compliance for card data. Your payment credentials go directly to Razorpay, not to us.
• Telegram - used internally by the Link Hooker team for operational alerts (for example, system error notifications). No user data is sent to Telegram. It is a team communication tool only.
• Google reCAPTCHA Enterprise - used via Firebase App Check to verify that requests to our backend come from the legitimate Link Hooker app. Subject to Google's terms of service.

We do not sell or share your personal data with third-party advertisers.

5. Data security

Your data is protected by Firebase Authentication, TOTP Two-Factor Authentication (optional, user-enabled), Firebase App Check with reCAPTCHA Enterprise, and Firestore security rules that scope all data strictly to your own user ID. For full details, see our Security page.

6. Data retention

Your account and content data are retained for as long as your account is active. If you delete your account, your data is removed from our systems. Some residual data may remain in backups for a short period before being purged.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated data.
• Export your data (Pro+ plan includes a built-in data export feature).

To exercise any of these rights, contact us at mylinkhooker@gmail.com.

8. India's Digital Personal Data Protection Act (DPDP)

Link Hooker processes personal data of users in India. We acknowledge our obligations under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and are working to ensure compliance as the Act's implementing rules are finalised by the Government of India. If you are an Indian user and have questions about how we handle your data under the DPDP Act, please contact us at mylinkhooker@gmail.com.

9. Changes to this policy

We may update this Privacy Policy as the product evolves or as legal requirements change. We will note the "Last updated" date at the top of this page when we do. Continued use of Link Hooker after any update constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions, contact us at mylinkhooker@gmail.com.