{ "$schema": "https://hookpilot.co/schemas/legal-manifest.v1.json", "version": "3.0.0", "company": { "legalName": "HookPilot Caption Studio LLC", "tradingName": "HookPilot", "parent": "Family Senci", "domain": "hookpilot.co", "supportEmail": "support@hookpilot.co", "legalEmail": "legal@hookpilot.co", "privacyEmail": "privacy@hookpilot.co", "securityEmail": "security@hookpilot.co", "dpoEmail": "dpo@hookpilot.co", "abuseEmail": "abuse@hookpilot.co", "billingEmail": "billing@hookpilot.co", "dmcaEmail": "dmca@hookpilot.co", "trademarkEmail": "trademark@hookpilot.co", "pressEmail": "press@hookpilot.co" }, "lastReviewed": "2026-05-30", "policies": [ { "slug": "terms", "title": "Terms of Service", "kind": "customer", "href": "/legal/terms.html", "version": "2.0.0", "effectiveDate": "2026-05-28", "icon": "scroll", "color": "#7c5cff", "summary": "Governs use of the HookPilot AI Workforce OS across 40 departments — agent veto, SaaS billing, IP, indemnification and liability cap." }, { "slug": "privacy", "title": "Privacy Policy", "kind": "customer", "href": "/legal/privacy.html", "version": "2.0.0", "effectiveDate": "2026-05-28", "icon": "shield", "color": "#22c55e", "summary": "What we collect, why, how long we keep it, sub-processors, transfers, rights under GDPR / CCPA / HIPAA-readiness." }, { "slug": "ai-disclosure", "title": "AI Usage & Disclosure Policy", "kind": "customer", "href": "/legal/ai-disclosure.html", "version": "2.0.0", "effectiveDate": "2026-05-28", "icon": "sparkle", "color": "#f59e0b", "summary": "40-dept workforce, hallucination self-check, human-in-loop, veto authority, Mata v Avianca discipline, model routing." }, { "slug": "cookies", "title": "Cookie Policy", "kind": "customer", "href": "/legal/cookies.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "cookie", "color": "#eab308", "summary": "Essential, functional, analytics and security cookies — no ad-network tracking, GPC honored." }, { "slug": "acceptable-use", "title": "Acceptable Use Policy", "kind": "customer", "href": "/legal/acceptable-use.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "ban", "color": "#dc2626", "summary": "The conduct and content rules every HookPilot workspace agrees to." }, { "slug": "ip-policy", "title": "Intellectual Property Policy", "kind": "customer", "href": "/legal/ip-policy.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "key", "color": "#6366f1", "summary": "Who owns outputs, prompts, templates and agents on HookPilot — in plain language and in the contract." }, { "slug": "billing", "title": "Subscription & Billing Policy", "kind": "customer", "href": "/legal/billing.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "credit-card", "color": "#0ea5e9", "summary": "Plans, renewals, proration, taxes, invoicing, dunning and downgrades." }, { "slug": "refund", "title": "Refund Policy", "kind": "customer", "href": "/legal/refund.html", "version": "1.1.0", "effectiveDate": "2026-05-30", "icon": "rotate-ccw", "color": "#10b981", "summary": "When HookPilot issues refunds, when we don't, how credits and promo credits are handled." }, { "slug": "dmca", "title": "DMCA / Copyright Policy", "kind": "customer", "href": "/legal/dmca.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "copyright", "color": "#a855f7", "summary": "Takedown, counter-notice, repeat-infringer policy, AI-generated infringement claims." }, { "slug": "deletion", "title": "Data Deletion Policy", "kind": "customer", "href": "/legal/deletion.html", "version": "2.0.0", "effectiveDate": "2026-05-28", "icon": "trash", "color": "#ef4444", "summary": "Self-serve account deletion, DSAR portal, retention schedule by data category." }, { "slug": "cybersecurity", "title": "Cybersecurity Policy", "kind": "compliance", "href": "/legal/cybersecurity.html", "version": "2.0.0", "effectiveDate": "2026-05-28", "icon": "lock", "color": "#3b82f6", "summary": "Tenant isolation, encryption, -HPS internal SOC, IR timelines, SOC 2 / ISO 27001 roadmap." }, { "slug": "data-retention", "title": "Data Retention Policy", "kind": "compliance", "href": "/legal/data-retention.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "clock", "color": "#0891b2", "summary": "Retention windows for every category, automated sweeps, legal-hold handling." }, { "slug": "incident-response", "title": "Incident Response Policy", "kind": "compliance", "href": "/legal/incident-response.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "alert", "color": "#f97316", "summary": "NIST IR phases, -HPS roles, statutory disclosure timelines, AI-safety incidents." }, { "slug": "vendor-risk", "title": "Vendor Risk Management Policy", "kind": "compliance", "href": "/legal/vendor-risk.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "building", "color": "#64748b", "summary": "Tiered review, AI-provider routing, sub-processor notifications, off-boarding." }, { "slug": "ai-governance", "title": "AI Governance Policy", "kind": "compliance", "href": "/legal/ai-governance.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "scale", "color": "#8b5cf6", "summary": "Charters, six-tier ladder, veto authority, EU AI Act and NIST AI RMF mapping." }, { "slug": "gdpr", "title": "GDPR Compliance Notice", "kind": "compliance", "href": "/legal/gdpr.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "globe", "color": "#0f766e", "summary": "Controller / processor roles, Article 6 bases, transfers, DSAR, DPO contact." }, { "slug": "dpa", "title": "Data Processing Agreement (DPA)", "kind": "compliance", "href": "/legal/dpa.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "file-signature","color": "#14b8a6","summary": "Article 28 processor agreement — auto-incorporated for Enterprise, available on request for Pro / Agency." }, { "slug": "soc2-readiness", "title": "SOC 2 Readiness Framework", "kind": "compliance", "href": "/legal/soc2-readiness.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "check-square","color": "#2563eb", "summary": "Trust Service Criteria scope, control families, evidence engine, auditor track, honesty clause." }, { "slug": "hipaa-readiness", "title": "HIPAA Readiness Policy", "kind": "vertical", "href": "/legal/hipaa-readiness.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "stethoscope", "color": "#16a34a", "summary": "BAA scope, HIPAA-enabled workspaces, PHI-aware AI routing, Healthcare-dept readiness path." }, { "slug": "education-privacy", "title": "Education Privacy Policy", "kind": "vertical", "href": "/legal/education-privacy.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "graduation", "color": "#84cc16", "summary": "FERPA, COPPA, GDPR-K and student-data handling for schools, universities and edtech." }, { "slug": "financial-compliance", "title": "Financial Services Compliance Policy", "kind": "vertical", "href": "/legal/financial-compliance.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "trending-up", "color": "#059669", "summary": "SEC, FINRA, MiFID II, FCA, ASIC, MAS rules for banking, finance and finfluencers." }, { "slug": "real-estate-compliance", "title": "Real Estate Compliance Policy", "kind": "vertical", "href": "/legal/real-estate-compliance.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "home", "color": "#f43f5e", "summary": "Fair Housing, RESPA, MLS, NAR-settlement and brokerage compliance for real-estate customers." }, { "slug": "political-usage", "title": "Political Campaign Usage Policy", "kind": "vertical", "href": "/legal/political-usage.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "vote", "color": "#b45309", "summary": "Neutral-platform rules, anti-suppression bright lines, deepfake limits, FEC and non-US regimes." }, { "slug": "contractor", "title": "Independent Contractor Agreement", "kind": "internal", "href": "/legal/contractor.html", "version": "2.0.0", "effectiveDate": "2026-05-28", "icon": "briefcase", "color": "#a78bfa", "summary": "Work-for-hire IP, prompt and charter ownership, non-solicit, classification, tax handling." }, { "slug": "nda", "title": "NDA & Confidentiality Agreement", "kind": "internal", "href": "/legal/nda.html", "version": "2.0.0", "effectiveDate": "2026-05-28", "icon": "fingerprint", "color": "#ec4899", "summary": "Mutual NDA covering AI architecture, agent prompts, frameworks, customer data and roadmap." }, { "slug": "marketplace-seller", "title": "Marketplace Seller Agreement", "kind": "internal", "href": "/legal/marketplace-seller.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "shopping-bag","color": "#db2777", "summary": "Rules for selling agents, templates and departments on the HookPilot Agent Marketplace." }, { "slug": "operating-agreement", "title": "Operating Agreement", "kind": "records", "href": "/legal/operating-agreement.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "book", "color": "#475569", "summary": "Sole-member LLC operating agreement governing HookPilot Caption Studio LLC." }, { "slug": "sole-member-resolution", "title": "Initial Sole Member Resolution", "kind": "records", "href": "/legal/sole-member-resolution.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "file-text", "color": "#475569", "summary": "Founding resolutions of HookPilot Caption Studio LLC's sole member." }, { "slug": "banking-resolution", "title": "Banking Resolution", "kind": "records", "href": "/legal/banking-resolution.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "landmark", "color": "#475569", "summary": "Authorization for banking, treasury and payment-processor accounts." }, { "slug": "ip-assignment", "title": "Intellectual Property Assignment Agreement","kind": "records", "href": "/legal/ip-assignment.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "key", "color": "#475569", "summary": "Standing IP assignment of pre-incorporation work into the LLC." }, { "slug": "founder-ip-record", "title": "Founder IP Ownership & Assignment Record","kind": "records", "href": "/legal/founder-ip-record.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "user-check", "color": "#475569", "summary": "Itemized record of founder-contributed IP transferred to HookPilot Caption Studio LLC." }, { "slug": "trademark-protection", "title": "Trademark Protection Guide", "kind": "protection", "href": "/legal/trademark-protection.html", "version": "1.1.0", "effectiveDate": "2026-05-30", "icon": "trademark", "color": "#d97706", "summary": "HookPilot, HookPilot Caption Studio, SERA and future agent brands — classes, watch and enforcement." }, { "slug": "brand-usage", "title": "Brand Usage Policy", "kind": "protection", "href": "/legal/brand-usage.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "palette", "color": "#db2777", "summary": "How partners, press, customers and affiliates may use the HookPilot brand." }, { "slug": "security-access", "title": "Internal Security Access Policy", "kind": "protection", "href": "/legal/security-access.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "key-round", "color": "#0d9488", "summary": "Least-privilege, JIT elevation, break-glass and quarterly access reviews." }, { "slug": "device-policy", "title": "Employee & Contractor Device Policy", "kind": "protection", "href": "/legal/device-policy.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "laptop", "color": "#7c3aed", "summary": "Device hardening, MDM, BYOD limits, mobile and off-boarding." }, { "slug": "api-usage", "title": "API Usage Policy", "kind": "protection", "href": "/legal/api-usage.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "code", "color": "#06b6d4", "summary": "Rate limits, scopes, authentication, prohibited automation and developer responsibilities." }, { "slug": "sla", "title": "SaaS Service Level Terms (SLA)", "kind": "protection", "href": "/legal/sla.html", "version": "1.0.0", "effectiveDate": "2026-05-30", "icon": "activity", "color": "#059669", "summary": "Plan-tiered uptime, exclusions, credit math and support response." } ], "groups": [ { "id": "customer", "label": "Customer Policies", "description": "What every HookPilot user, paying customer and visitor agrees to or can rely on.", "slugs": ["terms","privacy","ai-disclosure","cookies","acceptable-use","ip-policy","billing","refund","dmca","deletion"] }, { "id": "compliance", "label": "Compliance & Enterprise", "description": "Security, governance and regulatory posture for enterprise buyers and auditors.", "slugs": ["cybersecurity","data-retention","incident-response","vendor-risk","ai-governance","gdpr","dpa","soc2-readiness"] }, { "id": "vertical", "label": "Vertical Compliance", "description": "Sector-specific guardrails for HookPilot's regulated departments — health, education, finance, real estate, politics.", "slugs": ["hipaa-readiness","education-privacy","financial-compliance","real-estate-compliance","political-usage"] }, { "id": "internal", "label": "Internal Agreements", "description": "Contractor, marketplace and partner agreements used inside and around the HookPilot workforce.", "slugs": ["contractor","nda","marketplace-seller"] }, { "id": "records", "label": "Corporate Records", "description": "Founding and treasury records of HookPilot Caption Studio LLC. Forms are published; executed copies are held on file.", "slugs": ["operating-agreement","sole-member-resolution","banking-resolution","ip-assignment","founder-ip-record"] }, { "id": "protection", "label": "Business Protection", "description": "Brand, trademark, device, API and service-level commitments that protect HookPilot and its customers.", "slugs": ["trademark-protection","brand-usage","security-access","device-policy","api-usage","sla"] } ], "acceptance": { "trackedFields": ["userId","policySlug","policyVersion","acceptedAt","ipAddress","userAgent","tenantId"], "endpoint": "/api/legal/accept", "listEndpoint": "/api/legal/policies", "versionsEndpoint": "/api/legal/versions" } }