This policy explains what BeHooked collects when you use the service, why, and what control you have over it. It applies to the website, the dashboard, the API, the CLI and the MCP interface.
BeHooked is operated by Palshri Private Limited, a company incorporated in India. We are the entity responsible for your personal data (the “data controller” or “data fiduciary”). By using the service you agree to the practices described here; if you do not agree, please do not use it.
What we collect
Account data. Your name, email address and basic profile details. If you sign in through a third-party provider we receive the identifier and email that provider releases to us.
Content you submit. Prompts, text, uploaded images, video and audio, voice samples, brand assets, and the outputs generated from them. Some of this may include the faces or voices of you or other people.
Usage data. Which generations you ran, against which models, at what cost in credits, and whether they succeeded, along with how you use the website and dashboard: pages viewed, features used and session activity.
Technical data. IP address, browser and device type, approximate location derived from your IP address, log data, and error diagnostics when something fails.
Payment data. Payments are processed by Razorpay. We do not store your full card number on our own systems; we receive limited transaction data such as confirmation of payment, the plan purchased, and the last few digits or type of card.
Communications. Messages, support requests and feedback you send us.
Face and voice data
To create avatars, voices and videos, the service may process photographs and video of faces and recordings of voices. Depending on where you live, this may be treated as biometric or sensitive personal data.
We process this data only to create the avatars, voices and videos you ask us to generate. You are responsible for having the right, and any consent required, to upload the image, video or voice of any person, including yourself. We do not use this data to identify you against any external database, and we do not sell it.
Why we collect it
| Purpose | What it uses |
|---|---|
| Running generations you request | Content you submit |
| Billing and credit accounting | Usage data, account data, payment data |
| Preventing abuse and fraud | Technical data, usage data |
| Support, when you contact us | Account data, relevant usage data |
| Understanding and improving the service | Usage data, technical data |
| Fixing defects | Technical data |
We also use your information to communicate with you about your account, security and updates, and to comply with legal obligations and enforce our terms.
Use of content to improve our models
We may use content processed through the service — including prompts, uploaded media and generated outputs — to develop, train and improve our AI models and the service. Where the law requires it, we rely on an appropriate legal basis for this, such as your consent or our legitimate interests, and we work to limit and, where practical, de-identify the data used.
You can opt out of your content being used this way by writing to [email protected].
Who we share it with
We do not sell your personal data for money. We share it only as follows.
Service providers. Generation runs on AI model providers’ infrastructure: when you select a model, the prompt and any input media for that generation are sent to that provider to produce the output, and are handled under that provider’s own terms. We also use providers for hosting and storage (such as Amazon Web Services and Supabase), sign-in (Clerk), product analytics including session recordings (PostHog), error reporting (Sentry) and payments (Razorpay), among others. The providers we use change as the service evolves.
Integrations you enable. If you connect a third-party tool, we share data with it as needed to provide that integration.
Legal and safety reasons. To comply with law, regulation or legal process; to enforce our terms; or to protect the rights, property or safety of BeHooked, our users or others.
Business transfers. In connection with a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction.
International transfers
BeHooked is based in India and serves users globally. Your information may be stored and processed in India and in other countries where we or our service providers operate, which may have data-protection laws different from those in your country. Where required, we put appropriate safeguards in place for these transfers.
Retention
We keep your personal data for as long as your account is active or as needed to provide the service, and afterwards for as long as necessary to comply with our legal obligations (including tax and accounting records), resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, obtain a portable copy, withdraw consent where we rely on it, object to or restrict particular processing, opt out of the sale or sharing of personal data, and complain to your local data-protection authority. To exercise any of these, write to [email protected]. We will respond as required by applicable law, and we will not discriminate against you for exercising your rights.
India. Under the Digital Personal Data Protection Act, 2023, you may access, correct and erase your data, nominate another person to exercise your rights, and raise grievances with us at [email protected].
EU and UK. We process your data on the basis of our contract with you, your consent, our legitimate interests, and compliance with legal obligations.
California and certain other U.S. states. You have rights to know, delete and correct your personal data, to opt out of its sale or sharing, and to limit the use of sensitive personal data.
Cookies
We and our analytics providers use cookies and similar technologies. See the Cookie Policy for details.
Security
We use technical and organisational measures designed to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your account credentials confidential.
Children
The service is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, write to us and we will take steps to delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes we will update the effective date above and, where appropriate, notify you through the service or by email. Continuing to use the service after changes take effect means you accept the updated policy.
Contact
Questions about this policy, or about anything we hold: Palshri Private Limited, [email protected].