Last updated 15 September 2026
RecallHook is operated by Perpetua Digital Holdings LLC. This policy describes what the service collects, why, and who else receives it. It describes the software as it actually behaves.
The public checker at /check stores what you paste, even though it asks for no account. The submitted text, the product lines parsed from it, and the matches found are all retained as a record of the check.
No email address is required to run a check. If you do not go on to request a trial, the stored record holds only the text you submitted and its results — it is not linked to a name, company, or contact details. Ask us and we will delete it.
| Data | When |
|---|---|
| Text pasted into the recall checker, the parsed product lines, and the matches found | Every public check |
| Email address | Applying for the beta program, requesting a trial, creating an account, or contacting support |
| Name, company, phone number | Only if you supply them when applying for the beta program, requesting a trial, or onboarding |
| Your role, business type, number of locations, catalog size, where your catalog is kept, and any notes you add | Applying for the beta program. Applications are reviewed by our marketing and product engineering team |
| Consent record — whether you agreed, when, and to which version of this policy | When you ask us to email you |
| Password hash, two-factor secret, and backup codes | Accounts. Passwords are hashed and never stored in readable form |
| Display name and avatar image, if you set one | Account profile |
| Your product catalog — names, brands, UPCs, keywords | Uploaded, imported, or entered by you |
| Matches, alerts sent, and delivery outcomes | Ongoing monitoring |
| Billing identifiers issued by Stripe | Paid plans. Card numbers never reach RecallHook |
| Sign-in times and, for single sign-on, the identifier from your provider | Accounts |
Recall data itself comes from the CPSC, FDA and FSIS. It is public government information and contains nothing about you.
We do not sell personal information, and we do not run advertising.
RecallHook does not use advertising or tracking cookies. The admin and client applications keep your session token and your light/dark theme preference in your browser's own storage. Clearing site data signs you out and forgets the preference.
Account and catalog data is kept while the account exists. Recall-check records are kept as a history of what was checked and when. Ask us to delete any of it and we will, except where we are required to keep a billing record.
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email alerts always include a way to stop them. Depending on where you live you may have further rights under the GDPR, UK GDPR, or state privacy laws; contact us and we will honour them.
Passwords are hashed. Administrator accounts require two-factor authentication. Credentials you store in the console — such as notification tokens — are encrypted. No system is perfectly secure, and we do not claim otherwise.
Write to [email protected]. If the practices described here change materially, we will update this page and the date at the top.