1. Who We Are
HorrorGen ("we", "us") operates the website and service at horrorgen.app. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it.
2. Data We Collect
Account data: When you sign up, we collect your username, email address, and a hashed (non-reversible) version of your password.
Usage data: We store the scripts you generate and the videos you create, associated with your account. We also track your monthly generation count and ElevenLabs character usage for billing purposes.
Payment data: Payments are processed by Stripe. We store your Stripe Customer ID and Subscription ID to manage your account tier. We never see or store your card number, expiry, or CVV.
Support data: If you contact support, we retain the content of your message to respond to you.
Session data: We use a session cookie to keep you logged in. This cookie contains no personal information beyond a session identifier.
3. How We Use Your Data
- To provide the Service — generate scripts, voiceovers, and videos on your behalf
- To manage your subscription and billing via Stripe
- To enforce usage limits on free and Pro tiers
- To respond to support requests
- To send transactional emails (password reset, billing confirmation)
- To monitor errors and maintain service reliability
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.
4. Third-Party Services
To provide the Service, your data passes through the following third parties:
- Anthropic — your script prompts are sent to Claude to generate horror stories
- ElevenLabs — your generated narration text is sent to produce voiceover audio
- fal.ai — visual cues are sent to generate AI imagery
- Pexels — search terms are sent to retrieve stock footage
- Stripe — payment processing and subscription management
- Resend — transactional email delivery
- Railway — cloud hosting and infrastructure
Each of these services has its own privacy policy. We choose providers who maintain appropriate data protection standards.
5. Data Retention
We retain your account data for as long as your account is active. Generated videos are automatically managed — only your most recent videos are retained on our servers; older ones are removed to manage storage. You can delete your account and all associated data at any time from your account page.
6. Your Rights
You have the right to:
- Access — request a copy of the data we hold about you
- Correction — update your email or password via your account page
- Deletion — delete your account and all associated data from your account page
- Portability — request an export of your generated scripts
To exercise any of these rights, contact us at [email protected].
7. Cookies
We use a single session cookie to keep you logged in. This cookie is essential for the Service to function and does not track you across other websites. We do not use advertising or analytics cookies.
8. Security
Passwords are stored using industry-standard hashing (Werkzeug/bcrypt). All data is transmitted over HTTPS. We use Railway's infrastructure which maintains physical and network security controls.
9. Children
HorrorGen is not intended for users under 13 years of age. We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately at [email protected].
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Service after changes are posted constitutes acceptance.
11. Contact
Privacy questions or requests: [email protected]