PRIVACY POLICY

1. SCOPE AND KEY ROLES

This Policy applies to the following people and businesses:

• Operators are fishing charter businesses and their authorized personnel who use Hookset to manage trips, customers, schedules, payments, waivers, and related operations.
• Booking Customers are adults who make or manage a booking through the Service. Booking Customers do not currently create Hookset accounts.
• Passengers are people included in a booking. Passengers may include minors whose information is provided by an authorized adult.

Operators are independent businesses. When a Booking Customer reserves a charter, the Operator provides the charter service and receives the information needed to fulfill it. The Operator is responsible for its own services and for any independent use of personal information. Hookset's Terms restrict an Operator's use of information obtained through Hookset, but this Policy does not replace an Operator's own privacy notice or legal obligations.

2. INFORMATION WE COLLECT

2.1 Operator Information

We may collect the following information from or about Operators:

• Account and contact information, including names, business names, addresses, email addresses, telephone numbers, login credentials, and authorized-user details.
• Business and listing information, including boats, crew, schedules, availability, trip descriptions, pricing, policies, photos, and other content submitted to the Service.
• Compliance documents, including a current captain's license, current charter insurance, and a current charter fishing license when applicable.
• Payment-account and transaction information needed to support payment processing, reporting, refunds, disputes, and related financial administration.
• Customer records that an Operator enters, imports, or creates through the Service, including records for direct, telephone, walk-up, and historical customers.
• Communications with Hookset, including support requests, feedback, and other correspondence.

2.2 Booking Customer and Passenger Information

We may collect the following information when a charter is viewed, booked, managed, or completed:

• Contact information, including the Booking Customer's name, email address, mobile phone number, billing address, and other information provided with the booking.
• Booking information, including the selected Operator, trip, date and time, passenger count, charges, payment status, special requests, cancellations, refunds, and related records.
• Passenger information, including names, ages, emergency contacts, fishing-license details, and other information reasonably needed for the charter.
• Waiver information, including acknowledgments, signatures, timestamps, and responses to questions chosen by the Operator.
• Payment and transaction information. Complete payment card numbers are processed by a payment service provider and are not stored directly by Hookset.
• Mobile messaging information, including the telephone number, consent record, opt-in and opt-out status, message content, and delivery information for Booking Customers who choose to receive text messages.

2.3 Information Collected Automatically

When you use the Service, we may collect IP address, browser and device information, operating system, referring page, pages and features used, dates and times of access, approximate location derived from IP address, identifiers, and diagnostic or security data. We collect some of this information through cookies, pixels, local storage, and similar technologies.

2.4 OPTIONAL GOOGLE CONNECTIONS

Connecting a Google service is optional and requires your authorization. Available features and permissions are shown when you connect. The Google review feature described below is being prepared for a limited pilot; it is not yet generally available.

• Account and connection data. We access your Google account email to identify the connected account and manage its connection. We store authorization tokens securely so the enabled feature can continue working without asking you to sign in for every operation. Review connections retain a one-way hash of the verified email to identify related permissions when access is revoked.
• Google Calendar. With your permission, Hookset adds booking events to your connected calendar. These events include trip and booking references, dates and times, guest counts, and booking and payment status. Calendar identifiers, event references and synchronization status are stored to operate the connection. If calendar availability import is enabled, we read event timing and availability to record busy periods in Hookset.
• Google Business Profile reviews. When available and enabled, we access the Business Profile accounts and locations you manage so you can select your business. We retrieve its rating, review count, review text, reviewer display names and available profile images, review dates, source links, and business replies. We use this data for your review-management screen and, when you publish a review widget, display selected review content to visitors on your website. A reply you explicitly submit is sent to Google for that review. Google reviews are not added to Hookset marketplace listing pages.

Use, disclosure and safeguards

Google connection data is used to provide and support the connected features you choose. It is shared with Google as needed to operate those features, with service providers that host and secure them, and with website visitors only for the public review content you choose to publish. Authorization tokens and private account identifiers are not part of public review widgets. Tokens are encrypted at rest, connections use encrypted transport, and access within Hookset is restricted by account permissions.

We do not sell Google user data or use it for advertising, data-broker services, or training generalized artificial intelligence or machine-learning models. These restrictions apply even where other sections of this Policy describe analytics or advertising for other information. Hookset's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Review retention and your controls

Google review snapshots are temporary. Each snapshot is hidden from widgets when it is more than 48 hours old, replaced on a successful refresh, and scheduled for deletion no later than 30 days after retrieval. The general seven-year retention period in Section 9 does not apply to these review snapshots. Disconnecting reviews in Hookset removes the stored review tokens and snapshot. Minimal connection status and identifiers may remain for account administration and security.

You can also remove Hookset's Google access through your Google Account permissions. Revoking a shared Google grant may also disconnect your Hookset Calendar integration. Removing a connection does not delete reviews, submitted replies or calendar events already stored in Google. Contact support@hooksetapp.com to request access to or deletion of your Google connection information.

3. SOURCES OF INFORMATION

We collect information:

• Directly from Operators and Booking Customers
• From an adult who provides information about another Passenger
• From Operators that enter or import their own customer records
• From payment, messaging, distribution, analytics, security, and other service providers
• Automatically when a person visits or interacts with the Service

4. HOW WE USE INFORMATION

We use information to:

• Provide, administer, secure, and improve the Service
• Create and manage Operator accounts, listings, schedules, and business records
• Process and support bookings, payments, refunds, waivers, and communications
• Share booking information with the applicable Operator and selected distribution channel
• Review licenses and insurance when required for placement on a Hookset marketplace, Hookset partner website, or online travel agency
• Provide support and respond to questions or requests
• Detect, investigate, and prevent fraud, misuse, security incidents, and violations of our Terms
• Comply with law, maintain records, resolve disputes, and enforce agreements
• Measure performance and understand how the Service and our marketing website are used
• Send Operators product updates and marketing communications where permitted by law, subject to applicable opt-out rights

Hookset does not use Booking Customer or Passenger contact, booking, or waiver information for direct marketing. We may create and use aggregated or deidentified information for analytics, reporting, security, and service improvement. We do not attempt to reidentify information maintained in deidentified form.

5. HOW WE DISCLOSE INFORMATION

We do not sell personal information for money. We may disclose information as described below:

• Operators and Booking Customers: We provide each party with the information reasonably needed to administer and fulfill the booking. Information provided to the Operator may include names, email addresses, telephone numbers, trip details, passenger information, special requests, payment status, and completed waivers. Hookset's SMS consent is not transferred to the Operator.
• Service Providers: We disclose information to vendors that perform hosting, payment, messaging, telecommunications, analytics, advertising, security, support, document storage, and other services for Hookset. They may process information only for the services they provide or as otherwise permitted by law.
• Distribution Channels: When an Operator chooses to offer trips through a Hookset marketplace, Hookset partner website, or online travel agency, we disclose the listing and booking information needed to operate that channel.
• Legal and Safety Purposes: We may disclose information to comply with law or legal process, enforce our agreements, investigate fraud or misuse, or protect the rights, property, and safety of Hookset, our users, or others.
• Corporate Transactions: We may disclose information in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business. Mobile information and SMS consent will not be transferred for another party's independent marketing or promotional use.
• At Your Direction: We may disclose information when you direct us to do so or provide consent.

An Operator may use information received through Hookset only for the applicable charter, related communications, legal or safety obligations, and required business records. An Operator must obtain its own legally sufficient consent before using that information for marketing. Hookset does not grant permission to market to any person. For customers independently entered or imported by an Operator, the Operator is responsible for its existing relationship and any required notice or consent.

6. PAYMENTS AND OPERATOR WAIVERS

Payments

The Operator is the merchant of record for charter services. Payments are processed through the Operator's payment account using a payment service provider. Hookset may receive fees associated with a transaction. The Operator and payment service provider may process information under their own privacy policies.

Operator Waivers

Hookset does not require Booking Customers or Passengers to provide medical information. An Operator may include medical or other sensitive questions in a custom waiver. The Operator determines the waiver's content and is responsible for collecting and using the answers lawfully. Hookset processes and stores the waiver on the Operator's behalf.

7. COMMUNICATIONS AND SMS OPT-OUT

Transactional Text Messages

A Booking Customer may choose to receive recurring, non-marketing text messages by providing a mobile number and affirmatively opting in through the optional, unchecked checkbox presented during checkout. Consent is voluntary, is not a condition of purchase, and applies only to Hookset messages about the applicable booking. Messages may include booking confirmations, payment or refund updates, trip reminders, and service-related notices. Message frequency varies with booking activity. Standard message and data rates may apply.

Hookset is the sole sender of messages covered by this consent. The consent does not authorize an Operator or another party to send separate text messages. We do not sell, rent, or share mobile numbers, SMS opt-in data, or SMS consent with third parties or affiliates for their own marketing or promotional purposes. We disclose mobile information to messaging service providers and telecommunications carriers only as needed to operate the program or comply with law.

Reply STOP to opt out at any time. You may receive one confirmation that the opt-out was processed. No further messages covered by the opt-out will be sent unless you opt in again. Reply HELP for help. You may also contact support@hooksetapp.com.

Hookset text messaging is not a two-way customer support channel. Replies other than recognized opt-out and help keywords may not be monitored. Contact the Operator directly about a trip using the contact information provided with the booking.

Email and Other Communications

We may send service notices and booking-related emails that are necessary to administer an account or reservation. Operators may also receive product or marketing emails and may unsubscribe through the link in those messages. Hookset does not currently send direct marketing communications to Booking Customers.

8. COOKIES, ANALYTICS, AND ADVERTISING

We use cookies and similar technologies to keep Operators signed in, remember preferences, protect the Service, measure traffic, understand interactions, and evaluate marketing performance. Analytics and advertising providers may receive online identifiers, device information, and activity on our marketing pages. We do not provide them with booking content, waiver information, or SMS consent for targeted advertising.

Some privacy laws may treat certain advertising-related disclosures as a sale, sharing, or targeted advertising even when no money changes hands. Where applicable, you may request to opt out as described in Section 10. You may also use browser or device settings to limit cookies, although some features may not function properly.

9. RETENTION AND SECURITY

Retention

We generally retain Operator, booking, passenger, waiver, communication, consent, and transaction records for at least seven years. We may retain information longer when reasonably necessary to provide the Service, comply with law, resolve disputes, prevent fraud, enforce agreements, or protect legal rights. A deletion request may be limited by these obligations.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. No system or method of transmission is completely secure, and we cannot guarantee absolute security. Operators are responsible for securing their accounts and any information they export from the Service.

10. PRIVACY RIGHTS AND CHOICES

Depending on where you live and whether a privacy law applies, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information. You may also have the right to opt out of certain sales, sharing, or targeted advertising, limit certain uses of sensitive personal information, or appeal a decision about a request.

To submit a request, use our contact page or email support@hooksetapp.com. We may ask for information needed to verify your identity and authority. An authorized agent may submit a request where permitted by law, subject to verification. We will not discriminate against you for exercising a privacy right.

If your request concerns an Operator's independent use of information, please contact that Operator directly. Hookset will assist as required by law and our agreements.

Operators may access, correct, and export available business and customer records through account tools. Booking Customers may opt out of text messages by replying STOP. Operator marketing emails include an unsubscribe option.

11. MINORS

Only an adult may create an Operator account or complete a booking. Minors may participate as Passengers. An adult who provides information about a minor represents that the adult is authorized to provide the information and complete any applicable Operator waiver on the minor's behalf. The Service is not directed to minors for independent use.

12. THIRD-PARTY SERVICES AND POLICY CHANGES

Third-Party Services

The Service may link to or interact with services operated by third parties. Their privacy practices are governed by their own policies, and Hookset is not responsible for those practices. The Service is offered for use in the United States. Information may be stored and processed in the United States.

Changes to This Policy

We may update this Policy from time to time. We will post the revised Policy, update the effective date, and provide any additional notice required by law. Material changes apply prospectively from the stated effective date.

13. CONTACT US

Questions, privacy requests, and concerns may be submitted using the following contact information:

• Online: Hookset contact page
• Email: support@hooksetapp.com
• Mail: Hookset, 386 S. Atlantic Ave., #1024, Ormond Beach, FL 32176