What happens to the media I generate?
Generated outputs and their inputs stay in your library until you delete them. Deleting an asset removes it immediately and clears it from backups within 30 days.
Privacy policy Trust & Security
What happensto your work.
The questions a security review asks, answered on a page rather than on request — each one linking to the document that actually binds it.
The short answers
Is my work used to train models?
No. Prompts and input media are transmitted to the model provider you select in order to produce that generation, and providers are bound by contract to process them only for that purpose.
Privacy policyHow long is billing data kept?
Usage and billing records are kept for as long as tax and accounting law requires, which is why they outlive a deleted account. Everything else goes with the account.
Privacy policyDo you sign a DPA?
Yes. The standard DPA is published rather than sent on request, so it can be reviewed before any conversation with us.
Data processing agreementWill I be told before a new sub-processor is engaged?
Enterprise customers get 14 days' advance notice before a new sub-processor is engaged.
Data processing agreementIs AI-generated output labelled?
How generated media is disclosed, and what provenance metadata it carries, is set out in its own policy rather than buried in the terms.
AI content disclosureSub-processors
The current sub-processor list is available on request while this page is being finalised. Enterprise customers receive 14 days' notice before any new sub-processor is engaged, as set out in the data processing agreement.
[email protected]The documents
- Terms of Service The agreement between you and BeHooked — what you may do with the service and what you own.
- Privacy Policy What we collect, why we collect it, and what we do not do with it.
- Refund Policy How credit refunds, subscription cancellations, and generation error credits are handled.
- Acceptable Use & Content Policy Rules regarding synthetic media, prohibited content, voice/likeness cloning, and IP enforcement.
- Cookie Policy How we use essential cookies, session storage, and telemetry tokens.
- Data Processing Agreement (DPA) Data protection terms and standard contractual clauses for enterprise customers.
- AI Content Disclosure & Provenance Synthetic media disclosure guidelines, C2PA watermarking standards, and provenance tracking.
Reporting a vulnerability
Send it to [email protected]. We will acknowledge it, and we will not pursue anyone who reports a genuine issue in good faith and gives us a reasonable chance to fix it before disclosing it.