Privacy Policy

Not Hollywood ("we," "us," "our") respects your privacy. This Privacy Policy explains what personal information we collect when you use nothollywood.ai (the "Service"), how we use it, who we share it with, and the choices you have. If any of this concerns you, email zach@nothollywood.ai before creating an account.

1. Information We Collect

1.1 Information you give us

• Account information. Email address and password (hashed via Supabase Auth) when you sign up.
• Generation inputs. Text prompts, reference images, and generation settings you submit.
• Payment information. When you purchase credits, Stripe collects your card details directly. We receive from Stripe only: the last 4 digits of your card, your billing country, the amount charged, and Stripe's session/customer identifiers. We do not have access to your full card number, CVV, or expiration.
• Support correspondence. If you email us, we retain that correspondence to respond and improve the Service.

1.2 Information collected automatically

• Usage logs. IP address, browser user-agent, timestamps, pages viewed, and API calls made. Retained for 90 days for security and debugging, then discarded.
• Generated content. Video clips we render for you are stored so you can revisit them. You control deletion (see Section 5).

1.3 Cookies and similar technologies

We use a single first-party session cookie (issued by Supabase Auth) to keep you signed in. We do not use advertising cookies, cross-site trackers, or third-party analytics that build behavioral profiles.

2. How We Use Information

We use the information listed above solely to:

• Provide and operate the Service (authenticate you, render your video, deduct credits);
• Process payments and refunds via Stripe;
• Send you transactional emails (purchase receipts, security alerts, service changes);
• Investigate abuse, prevent fraud, and enforce our Terms of Service;
• Comply with legal obligations and respond to lawful requests.

3. What We Do Not Do

• We do not sell your personal information.
• We do not use your prompts or generated video to train our own AI models.
• We do not run advertising networks or third-party behavioral trackers on the site.
• We do not share your generation content with anyone outside our essential service providers listed below.

4. Service Providers

We rely on a small number of third-party processors to run the Service. Each receives only the data they need:

• Stripe, Inc. — payment processing. Collects payment card and billing details directly.
• Supabase — authentication and database (email, hashed password, credit balance).
• Railway — application hosting (usage logs, server-side session data).
• fal — proxy to the MiniMax H3 video model. Receives your prompt and reference images at generation time; does not receive your identity or email.

Prompts and reference images sent to fal/MiniMax are governed by those providers' privacy terms. We recommend not including personal identifying details in prompts.

5. Your Rights and Choices

• Access and download. Email zach@nothollywood.ai for a copy of your account data.
• Delete a specific video. Use the delete control on any clip in your library.
• Delete your account. Email us and we will delete your account, remaining credit balance, and all associated generation content within 30 days. Aggregate financial records required for tax and audit purposes may be retained per applicable law.
• Correct your data. Update your email in account settings or email us.
• Unsubscribe. Transactional emails (receipts, security alerts) are required for account operation and cannot be unsubscribed while the account is active.

If you are in California, the EEA, the UK, or another jurisdiction with statutory data-subject rights (GDPR, CCPA/CPRA), you additionally have the right to lodge a complaint with your local data-protection authority. We will honor verified requests within the timeframes those laws require.

6. Data Retention

• Account records and credit balance: for the life of your account, plus up to 30 days after deletion request.
• Generated video: until you delete it or your account is deleted.
• Server access logs: 90 days.
• Payment records: 7 years, as required by U.S. tax law.

7. Security

We use HTTPS for all traffic, hashed password storage via Supabase Auth, and least-privilege access controls on our infrastructure. No system is 100% secure. If we ever suffer a data breach affecting your personal information, we will notify affected users within 72 hours of confirmation, as required by applicable law.

8. International Users

The Service is hosted in the United States. If you access it from outside the U.S., you consent to the transfer of your information to the U.S., where privacy laws may differ from your home jurisdiction.

9. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email zach@nothollywood.ai and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by email at least 14 days before they take effect. Non-material changes take effect on the date shown at the top of this page.

11. Contact

For privacy questions, requests, or complaints, email zach@nothollywood.ai.