Last updated: October 7, 2026
Privacy Policy
This policy describes how HOOKBOOK INC, doing business as Juno Labs (“Juno,” “we,” “us”) collects, uses, and shares information when you use the Juno service at junolabs.io and related apps (the “Service”).
1. Who we are
Juno is a content creation and brand platform operated by HOOKBOOK INC, doing business as Juno Labs. We help teams plan, generate, analyze, organize, and publish social content. We operate from the United States (California).
2. Information we collect
Account information
When you sign up we collect information such as your name, email address, and password. You may also sign in with a third-party provider (currently Google). In that case we receive identifiers and profile details the provider shares with us, typically name and email.
Workspace and content you provide
We store the content you create or upload in Juno. That can include brands, briefs, media files, captions, comments, brand knowledge, project files, scheduled or draft posts, and similar workspace data.
Connected social accounts
If you connect Instagram (or another supported platform), we use OAuth to receive access tokens and account information needed for that connection. We do not receive your Instagram password. Depending on the permissions you grant, this may include:
- Account identifiers, username, and display name
- Profile image (avatar) URL
- Access tokens (and related token metadata) used to call the platform on your behalf
- Posts and media you authorize us to read — for example captions, permalinks, timestamps, thumbnails, and media files or URLs
- Basic engagement fields returned with those posts when available — currently likes and comments counts (not reach, impressions, or other insights metrics)
We use this information to import and sync observed posts into your workspace, analyze that content (including with automated/AI systems), help you search and reuse insights about what you have already published, and — when you choose to publish, schedule, or enable automated publishing — send selected media, captions, and publishing instructions to the connected platform. Connecting an account alone does not authorize us to publish. We do not sell this data.
Billing
If you subscribe, payment is processed by our payment provider (currently Stripe). We receive subscription status and limited billing metadata. We do not store full card numbers.
Usage and device data
We automatically collect technical information such as IP address, browser type, device type, pages viewed, and diagnostic logs. We use this to operate, secure, and improve the Service.
Cookies and similar technologies
We use cookies and similar technologies as needed to keep you signed in, maintain session security, and remember basic preferences. These are primarily authentication and session cookies from our auth and hosting stack. We do not currently use third-party advertising cookies or advertising pixels on the Service.
3. How we use information
- Provide, maintain, and improve the Service
- Create and manage your account and workspaces
- Sync and analyze connected social content you authorize
- Publish, schedule, or auto-publish content you authorize to connected platforms (sending selected media, captions, and publishing instructions)
- Generate and process media and text using infrastructure and AI providers — which may include sending captions, media (or media URLs), and related imported or workspace content to those providers to analyze content and generate recommendations
- Process payments and send service-related notices
- Respond to support requests and enforce our terms
- Protect the Service against abuse, fraud, and security incidents
4. How we store information
We store account, workspace, and connected-account data on cloud infrastructure and databases operated by our service providers (currently including hosting, database, and file storage providers). Access tokens for connected social accounts are stored with restricted access. Data may be processed in the United States and other countries where we or our providers operate. We use reasonable administrative and technical safeguards; see Security below.
5. How we share information
We share information only as needed to run Juno:
- Service providers that host, store, process, or analyze data for us (for example cloud hosting, databases, file storage, email, payments, and AI model providers). They process data as needed to provide the Service, subject to their terms and our agreements with them.
- Platform providers you connect (such as Meta / Instagram) when we use their APIs to sync content you authorized, or to publish content when you publish, schedule, or enable automated publishing.
- Legal and safety disclosures if required by law or to protect Juno, our users, or the public.
- Business transfers if we are involved in a merger, acquisition, or sale of assets, with notice where required.
- With your direction — for example when you invite teammates into a workspace.
We do not sell your personal information.
6. Retention
We keep account and workspace data for as long as your account is active and as needed to provide the Service and meet legal, security, and accounting obligations. For connected social accounts specifically:
- Disconnecting stops Juno from using the connection for future access, syncing, and publishing.
- Imported content may remain in your workspace after disconnect so your history and analysis stay available while you continue using those features.
- Account deletion or a social-data deletion request removes imported connected-platform content and associated analysis for the scope you request (see our Data Deletion page).
- We also delete connected-platform data when it is no longer needed to provide those features.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct, or delete personal data.
- Update account details in the Service where those controls exist
- Disconnect a social connection in Juno (this stops Juno from using the connection for future access, syncing, and publishing)
- Remove Juno from your Instagram (Meta) app settings
- Follow the steps on our Data Deletion page, or email us at team@junolabs.io to request access or deletion of personal data, including imported social content
After a deletion request, we may retain limited ordinary records such as billing or security logs when required by law or for fraud prevention. Connected-platform data (for example imported Instagram content and tokens) is deleted as described in Retention and on our Data Deletion page, except where applicable law or platform requirements expressly permit limited retention.
8. Security
We use reasonable administrative, technical, and physical safeguards, including restricting access to social tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children’s privacy
The Service is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will take steps to delete it.
10. International transfers
We may process information in the United States and other countries where we or our providers operate. Those locations may have different data-protection laws than your home country.
11. Links to other sites
The Service may link to third-party sites (including social platforms). Their privacy practices are governed by their own policies, not this one.
12. Changes
We may update this policy from time to time. We will post the updated policy on this page and change the “Last updated” date. If changes are material, we may also notify you by email or in the Service.
13. Contact us
Questions or privacy requests: team@junolabs.io