Privacy Policy

HookQ is a product of Statelogic. This policy applies to the HookQ website, dashboard, API, and MCP service operated by Statelogic.

• Account information: details supplied through our authentication provider, such as your name, email address, account identifier, and sign-in session data.
• Connected app information: the apps you connect, account labels, permissions granted, and OAuth tokens or credentials needed to make authorized requests.
• Action data: inputs you or your agent send for a tool call and the response returned by the connected app. HookQ processes this data to carry out the request.
• Usage and billing records: plan status, action usage, payment and subscription identifiers, and transaction records. Payment details entered at checkout are handled by Razorpay.
• Technical information: request and diagnostic information needed to operate, secure, and troubleshoot the service. Our hosting and service providers may also process information such as IP addresses and device data.

We use this information to authenticate accounts, connect the apps you choose, execute actions you request, enforce API permissions and usage limits, process subscriptions, prevent abuse, troubleshoot errors, and maintain and improve HookQ.

An agent using your HookQ API key can access only the actions allowed by that key and the apps connected to your account. You control which apps to connect and can revoke keys or disconnect apps in the dashboard.

When you connect an app, its provider supplies credentials for the permissions shown during authorization. HookQ sends the information needed for a requested action to that provider and returns its response. The provider's own terms and privacy policy also apply to information it processes.

We use Clerk for account authentication and Razorpay for paid subscriptions. Hosting and database providers process information needed to run the service. These providers may process data in locations outside your country.

Authentication uses session cookies. When you connect an app, HookQ also uses a short-lived cookie to protect the OAuth flow. Clerk and Razorpay may use their own cookies when you use their services.

HookQ encrypts stored connection tokens and credentials. It stores hashes of API keys rather than the raw keys, which are shown only when created. No online service can guarantee complete security, so please keep your credentials and API keys private.

You can disconnect an app to delete its stored HookQ connection and revoke an API key from the dashboard. We keep account, usage, and billing records for as long as needed to provide the service, resolve disputes, maintain security, and meet applicable recordkeeping requirements. Copies held by connected apps or other providers are governed by their own policies.

Depending on where you live, you may have rights to request access, correction, or deletion of personal information, or to withdraw a permission you previously gave. Disconnecting an app stops future HookQ access through that connection. For account-level requests, contact Statelogic using the contact details below.

We may update this policy as HookQ changes. The date at the top of this page shows the latest update. Material changes will be communicated through the service or another appropriate channel.

For privacy questions or requests, contact Statelogic at admin@statelogic.in.

Please also read our Terms of Service.