Privacy Policy

    Last updated: February 15, 2026

    1. Introduction

    HookZ.ai ("HookZ", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your data when you use our websites, platforms, products, and services, including but not limited to HookZ CX, HookZ Connect, HookZ Voice Edge, HookZ Meet, and the HookZ InfraX platform (collectively, the "Services").

    By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of our Services.

    2. Information We Collect

    2.1 Information You Provide

    • Account Information: Name, email address, phone number, company name, job title, and billing information when you create an account or request a demo.
    • Communications Data: Call recordings, messages, video conference content, and related metadata processed through HookZ CX, HookZ Connect, HookZ Voice Edge, and HookZ Meet, as directed by your organization.
    • Support Data: Information you provide when contacting support, including diagnostic data, system logs, and correspondence.
    • Payment Information: Credit card details, billing addresses, and transaction records processed through our secure payment providers.

    2.2 Information Collected Automatically

    • Usage Data: Service usage patterns, feature interactions, session duration, API call volumes, and performance metrics.
    • Device & Network Data: IP addresses, browser type, operating system, device identifiers, and network configuration data.
    • Infrastructure Telemetry: For InfraX platform users — VM performance metrics, resource utilization data, cluster health indicators, and system event logs collected for service optimization and support.
    • Cookies & Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and gather analytics. See Section 7 for details.

    2.3 Information from Third Parties

    • Business contact information from partners and resellers.
    • Publicly available business information for lead enrichment.
    • Data from integrated third-party services you connect to our platform.

    3. How We Use Your Information

    We use collected information for the following purposes:

    • Service Delivery: To provide, maintain, and improve our communications and infrastructure services.
    • Customer Support: To respond to inquiries, troubleshoot issues, and provide technical assistance.
    • Security & Compliance: To detect, prevent, and address fraud, security threats, and technical issues; to comply with legal obligations and regulatory requirements.
    • Analytics & Improvement: To analyze usage trends, optimize performance, and develop new features.
    • Communications: To send service notifications, product updates, and, where permitted, marketing communications.
    • Billing: To process payments, manage subscriptions, and maintain financial records.

    4. Data Sharing & Disclosure

    We do not sell your personal information. We may share data with:

    • Service Providers: Trusted vendors who assist in delivering our Services (hosting, payment processing, analytics), bound by contractual data protection obligations.
    • Business Partners: Channel partners and resellers, only as necessary to fulfill service delivery.
    • Legal Compliance: When required by law, regulation, legal process, or enforceable governmental request.
    • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, with appropriate confidentiality protections.
    • With Your Consent: For any purpose disclosed to you at the time of collection with your explicit consent.

    5. Data Security

    We implement industry-standard technical and organizational measures to protect your data, including:

    • AES-256 encryption for data at rest and TLS 1.3 for data in transit.
    • SOC 2 Type II compliant infrastructure and processes.
    • Role-based access controls and multi-factor authentication.
    • Regular penetration testing and vulnerability assessments.
    • 24/7 security monitoring and incident response capabilities.

    While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

    6. Data Retention

    We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of data:

    • Account Data: Duration of account plus 12 months after termination.
    • Communications Content: As configured by your organization's retention policies, or 90 days by default.
    • Infrastructure Logs: Up to 12 months for operational and compliance purposes.
    • Billing Records: As required by applicable tax and financial regulations.

    7. Cookies & Tracking

    We use the following types of cookies:

    • Essential Cookies: Required for platform functionality and security.
    • Analytics Cookies: Help us understand usage patterns and improve services.
    • Preference Cookies: Remember your settings and preferences.
    • Marketing Cookies: Used to deliver relevant advertising (only with consent).

    You can manage cookie preferences through your browser settings or our cookie consent tool.

    8. International Data Transfers

    HookZ operates globally with offices in the UAE, India, and the United Kingdom. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

    • Standard Contractual Clauses (SCCs) approved by relevant authorities.
    • Compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection.
    • Adherence to GDPR requirements for EU/EEA data subjects.
    • Compliance with India's Digital Personal Data Protection Act, 2023.

    9. Your Rights

    Depending on your jurisdiction, you may have the right to:

    • Access, correct, or delete your personal data.
    • Restrict or object to certain processing activities.
    • Data portability — receive your data in a structured, machine-readable format.
    • Withdraw consent at any time where processing is consent-based.
    • Lodge a complaint with a relevant data protection authority.

    To exercise any of these rights, contact us at [email protected].

    10. Children's Privacy

    Our Services are designed for business use and are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

    12. Contact Us

    For questions, concerns, or requests regarding this Privacy Policy: