Privacy Policy

Last updated: 13 November 2026

Hook ("we", "us") runs the website and app at app.hook.com.bd. Hook helps online shops in Bangladesh see their Facebook and Instagram ad results, match them with real shop orders, get alerts, and schedule Facebook page posts. This page explains what data we keep, why, and how you can remove it.

Short version

• We only read your ad data. Hook never creates, edits, pauses or deletes your ads, and never changes budgets.
• We post to your Facebook page only when you ask us to.
• We do not sell your data, and we do not use it for advertising.
• Facebook tokens and shop keys are stored encrypted.
• You can disconnect Facebook at any time, and ask us to delete everything.

Data we keep

Your Hook account

Your name, email address, business name and phone number (if you add them), and your password, which is stored only as a secure hash. We also keep your plan, trial dates and settings, such as alert limits and currency.

Facebook and Instagram (Meta)

When you click "Connect Facebook", you choose what Hook may see. We ask Meta for these permissions:

• ads_read: to read the ad accounts you choose and their results, such as spend, impressions, reach, clicks, purchases, messages, video views, and totals by age, gender, location, placement, device and hour.
• pages_show_list and pages_read_engagement: to list your pages, so you can pick which ones Hook may post to.
• pages_manage_posts: to publish or schedule the posts you write in Hook, and to cancel a scheduled post when you ask.

We store your Facebook user ID, an access token for you and for each page you connect (encrypted), the names and IDs of your ad accounts, campaigns, ad sets, ads and pages, ad thumbnails, and ad result numbers. Results by age, gender, location and the like are totals that Meta gives us. They never identify a single person.

Your shop and orders

If you connect Shopify or WooCommerce, we store the shop address and the keys you give us (encrypted). For each order we keep the order number, date, amount, status and the UTM tags that link it to a campaign. We do not store your customers' names, phone numbers or addresses. The same applies to orders you upload from a CSV file or a courier report.

Posts

We keep the text, link, page and time of the posts you create in Hook. A photo you add is sent straight to Facebook. We do not keep a copy.

Payments

For bKash, Nagad or Rocket payments we keep the sender number, transaction ID, amount and plan, so we can check and record the payment. We never ask for your PIN or password.

Alerts

If you turn on alerts, we use your email address, and your Telegram chat ID if you connect Telegram, to send them.

Technical data

Our server keeps short logs, such as IP address, browser and error details, to keep the service safe and fix problems. We use one cookie to keep you logged in. We do not use advertising or tracking cookies.

How we use your data

• To show your dashboard, reports and real ROAS.
• To send the alerts you asked for.
• To publish and track the page posts you created.
• To manage your trial, plan and payments, and to send account emails, such as password resets and billing reminders.
• To keep Hook secure and working.

Data from Meta is used only to provide these features to you. We do not combine it with data from other users, and we do not use it to build profiles of people.

Who we share data with

We do not sell or rent your data. We share it only with the services needed to run Hook:

• Meta, to read your ad data and publish your posts.
• Shopify or WooCommerce, only the shop you connect, to read orders.
• Our hosting provider (Namecheap) and Cloudflare, which store and deliver the site.
• Telegram, only if you turn on Telegram alerts.

We may also share data if the law requires it.

How long we keep it

We keep your data while your account is open. If you disconnect Facebook, we delete your Facebook and page tokens and your page list straight away, and stop reading new ad data. If you ask us to delete your account, we delete your account and all its data within 30 days. We may keep payment records longer if the law requires it.

How to delete your data

1. Disconnect Facebook: in Hook, go to Settings and click "Disconnect". This deletes your Facebook access tokens and page list.
2. Remove Hook from Facebook: on Facebook, go to Settings & privacy → Settings → Business integrations, find the app you approved when you connected Hook, and click Remove.
3. Delete everything: contact us using the details below, from the email address of your Hook account, and ask us to delete your account. We will delete your account, ad data, orders, posts and settings within 30 days, and tell you when it is done.

Security

Hook uses HTTPS everywhere. Facebook tokens and shop keys are encrypted in our database, and passwords are hashed. Other Hook users can never see your data. Our staff look at an account only to give support or check a payment. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you.

Your rights

You can ask us to show you the data we keep about you, correct it, export it, or delete it. You can also stop using Hook at any time.

Children

Hook is a business tool for people aged 18 or over. We do not knowingly collect data from children.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is important, we will also tell you by email or in the app.

Contact us

For questions about this page, or to ask us to show, correct or delete your data, contact us. We reply within 7 days.

• WhatsApp: 01915009386
• Website: app.hook.com.bd