Privacy Policy

• Account registration: When you create an account, we collect your email address, username, and password (stored as a cryptographic hash — we never store your password in plain text).
• Content you create: Scripts, screenplays, scene breakdowns, notes, and any other content you write or upload within the Services.
• Communications: If you contact us for support or feedback, we retain those messages and your contact information.

• Usage data: Pages visited, features used, actions taken within the platform, and timestamps.
• Device and session data: IP address, browser type and version, operating system, device identifiers, and session tokens used to manage active logins.
• Log data: Server logs that record requests made to our Services, including error logs used for debugging and security monitoring.

We use session cookies that are strictly necessary to authenticate you and maintain your logged-in state. These cookies expire when your session ends or when you log out.

We also use optional analytics cookies, provided through Google Analytics 4 via Google Tag Manager, to understand how visitors use the site so that we can improve it. These analytics cookies are not set unless you consent. We use Google Consent Mode, which defaults analytics storage to denied, and we display a cookie banner on your first visit so that you can accept or decline. Your choice is saved in a cookie named hd_cookie_consent. You can change or withdraw your choice at any time using the Cookie settings link in the footer, which reopens the banner. We do not use advertising or cross-site tracking cookies.

We use the following service providers who process personal data on our behalf and are bound by appropriate data processing agreements:

• Amazon Web Services (AWS): Cloud infrastructure, authentication (AWS Cognito), and data storage. AWS processes account credentials and session data on our behalf.
• Strapi: Headless content management system used to manage our blog and marketing content. Strapi does not process end-user account data.

We may disclose your information if required to do so by law or in the good-faith belief that such disclosure is necessary to comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with the Services, or protect the personal safety of users or the public.

If Hollywood Disruption is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice within the Services before your information is transferred and becomes subject to a different privacy policy.

Regardless of your location, you may:

• Access, correct, or update your account information through your account settings;
• Delete your account at any time by contacting us at privacy@hollywooddisruption.com; and
• Opt out of transactional communications (other than those necessary to operate your account).

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request that we restrict processing of your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on our legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

Our legal bases for processing are: performance of our contract with you (providing the Services), compliance with legal obligations, and our legitimate interests in operating and securing the Services.

Hollywood Disruption, Inc. acts as the data controller for personal data processed through the Services. To exercise any of these rights, contact us at privacy@hollywooddisruption.com. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request deletion of your personal information, subject to certain exceptions.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a request, email us at privacy@hollywooddisruption.com with the subject line "California Privacy Request." We will respond within 45 days.