Hookly Privacy Policy

Effective date: October 27, 2026

In short: Hookly keeps your settings, API key, scan history and CRM leads in your own browser. There is no Hookly account, server, analytics, or advertising. The only service that receives data is Google Gemini, and only when you use an AI feature with your own API key.

What Hookly does

Hookly is a Chrome extension for finding business contact details on websites you choose to scan, organizing them in a local CRM, and optionally using Google Gemini to check those contacts and draft outreach emails.

Data stored on your device

Hookly stores the following in Chrome's local extension storage (chrome.storage.local) in your browser profile. It is not synced to your Google account and is not sent to any Hookly server:

• Your Google Gemini API key (stored unencrypted in local extension storage, like other extensions that use your own key)
• Your sender profile (name, role, company, offer, target audience, signature) and custom contact role labels
• Scan history (up to 20 scans), CRM leads, notes, saved email drafts and lead statuses
• A short activity log of actions such as "scan complete" (no keys or contact data)

You can remove your API key in Settings, clear scan history, delete leads, or uninstall the extension to remove this data. CSV exports are saved where you choose.

Website access and scanning

When you press Scan, Hookly reads the text, links and contact details (emails, phone numbers, LinkedIn, X and Instagram links) on the active page. With Deep Scan it may also request a few relevant pages from the same website (for example, contact or about pages) without sending cookies. This happens in your browser. Hookly does not scan in the background and does not collect your general browsing history.

Contact details found on websites can include personal data of other people, such as names, job titles, work emails and phone numbers. Hookly stores this only in your browser. You are responsible for using it lawfully, including complying with applicable privacy, anti-spam and marketing laws where you and your recipients are located.

Google Gemini (optional)

If you add a Gemini API key and use AI contact analysis or AI email drafting, Hookly sends a request directly from your browser to Google's Gemini API (generativelanguage.googleapis.com). Depending on the feature, the request can include:

• Scraped contact candidates (emails, phone numbers, social links) and the short surrounding text from the page, the site domain and company name
• The page title, description, main headings and value proposition
• The selected recipient's email and any name, job title or role found for them
• Your sender profile, used to write the draft
• Your API key, sent to Google to authorize the request

Hookly does not send this data to anyone else. Google processes API requests under its own terms and privacy practices, which can differ depending on your API plan and settings, so review them before adding a key. Usage and any charges belong to your Google account. Without a key, scanning still works and AI features are unavailable.

Other third-party requests

To show a site's icon,