1. About This Policy
This Privacy Policy explains how HoollyWoody (also referred to as "we," "us," or "our") collects, uses, shares, and protects information in connection with the HoollyWoody website at https://hoollywoody.com and the related private-beta platform, tools, generated outputs, and features (together, the "Service"). Capitalized terms not defined in this Policy have the meanings given in our Terms of Use. By accessing or using the Service, you confirm that you have read this Policy and that you understand the practices described in it.
2. Who We Are
"HoollyWoody" is the trade name and brand of QuickFix AI Inc., the company that operates the Service. References in this Policy to "HoollyWoody," "we," "us," or "our" mean QuickFix AI Inc. doing business as HoollyWoody. For the personal data we process about you in connection with the Service, QuickFix AI Inc. is the data controller (or, where another term applies under your local law, the equivalent).
3. Scope
This Policy applies to information we collect through the Service, including via the request-access form on our website, any email or other communications you send us, your use of the Service during the private beta, the materials you submit to the Service, and the output generated for you. This Policy does not apply to third-party websites, services, or platforms that we do not operate, including any third-party AI providers we engage to render output, each of which operates under its own privacy practices.
4. Information We Collect
Information you provide directly. When you request beta access through our website, we collect the information you submit through the form, which currently includes your name, email address, optional phone number, and a free-form message describing your project. When you correspond with us by email or other channels, we collect the contents of those communications and any attachments.
Submitted Materials. When you use the Service, you provide scripts (in PDF or paragraph form), references, briefs, and other creative material (collectively, "Submitted Materials" in our Terms of Use). Submitted Materials may contain personal data only if you choose to include it; we ask that you not submit personal data of third parties without their consent and an appropriate lawful basis.
Output and project data. The Service generates output associated with you and your project, including teasers, posters, key art, loglines, synopses, plot summaries, cast portraits and bios, casting considerations, location ideas, market intelligence, original score, narration, and a private watch page. We retain output, project metadata, and configuration to operate, debug, secure, and improve the Service.
Account and access information. When access credentials, share links, or invitation tokens are issued to you, we keep records of those credentials and links and of their usage, including activation events, viewing events, and access expiration.
Information collected automatically. When you visit the website or use the Service, we and our service providers may automatically collect technical information, including IP address, approximate location derived from IP, device type and identifiers, browser type, operating system, language preferences, referring and exit pages, pages viewed, time stamps, click and interaction data, and diagnostic and performance data. We may use cookies, local storage, and similar technologies to collect this information; see Section 12.
Information from third parties. We may receive limited information about you from professional networks, mutual contacts, or referrals when you are introduced to the beta program.
We do not knowingly collect special categories of personal data (such as health, biometric, genetic, or government-identifier data), and we ask that you not submit such data through the Service.
5. How We Use Information
We use the information described above to:
- operate, maintain, secure, and improve the Service, including rendering output, generating private watch pages, debugging, and quality assurance;
- evaluate and respond to beta-access requests and to communicate with you about your access, your project, and the beta program;
- transmit Submitted Materials and intermediate prompts to third-party AI providers acting on our behalf for the rendering pipeline;
- monitor and enforce compliance with our Terms of Use and Acceptable Use restrictions, detect and prevent abuse, fraud, and security incidents, and protect the rights, property, and safety of HoollyWoody, our users, and others;
- conduct research, analytics, and product development, including improving prompts, model selection, configurations, and features;
- comply with legal obligations and respond to lawful requests from courts, regulators, and law-enforcement authorities; and
- send you transactional and service-related communications (which you cannot opt out of while you have access) and, where permitted, occasional product updates (which you can opt out of at any time using the unsubscribe mechanism in the message or by contacting us).
We do not use Submitted Materials or output to train foundation models. We may use de-identified, aggregated, or non-personal data for analytics, benchmarking, and product improvement without restriction under this Policy.
6. Legal Bases (Where Applicable)
Where the General Data Protection Regulation, the United Kingdom GDPR, or similar laws apply to our processing of your personal data, we rely on the following legal bases: (a) performance of a contract with you (delivering the Service you requested); (b) our legitimate interests in operating, securing, and improving the Service, communicating with industry professionals about our beta, and enforcing our Terms of Use; (c) compliance with legal obligations; and (d) your consent, where required, which you may withdraw at any time without affecting the lawfulness of prior processing.
7. Third-Party AI Providers and Service Providers
To deliver the Service we share information with third parties that act on our behalf, including:
- third-party AI providers, which receive Submitted Materials, prompts, and intermediate data necessary to generate output;
- cloud hosting and infrastructure providers — we host data and run the Service on Google Cloud and Firebase, including Firestore, Cloud Storage, and Cloud Functions;
- email and messaging providers we use to communicate with you;
- analytics, error-monitoring, and security providers; and
- professional advisors (auditors, attorneys, accountants) under appropriate confidentiality obligations.
Each provider is engaged under terms designed to require appropriate confidentiality and security and to limit use of the data to operating the Service for us. Some third-party AI providers may, under their own policies, retain inputs for limited purposes such as abuse monitoring. Because third-party AI providers operate under their own terms, you should not submit confidential third-party information to the Service unless you have all rights necessary for that processing.
8. Other Sharing
In addition to the sharing described in Section 7, we may share information:
- with law-enforcement, regulators, courts, or other government authorities to comply with applicable law, valid legal process, or a binding government request, or where we believe in good faith that disclosure is necessary to investigate or prevent illegal activity, fraud, or harm;
- to protect and defend our rights, property, and safety, the rights and safety of our users, and the public, including to enforce our Terms of Use;
- in connection with a corporate transaction, including a merger, acquisition, financing, reorganization, sale of assets, or insolvency proceeding, in which case information may be transferred to the counterparty subject to appropriate confidentiality protections; and
- with your direction or consent, including when you forward a private share link to a third party (in which case the recipient will be able to view the output and any associated metadata you have shared).
We do not sell or rent your personal information to third parties, and we do not "share" your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act and similar U.S. state laws.
9. International Data Transfers
We are based in the United States and we use service providers located in the United States and other jurisdictions. Information we collect may be transferred to, stored in, and processed in the United States or any other country in which we or our service providers operate, including jurisdictions whose data-protection laws differ from those of your country of residence. Where required by law, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses adopted by the European Commission, the United Kingdom International Data Transfer Agreement, or other recognized transfer mechanisms.
10. Data Retention
We retain personal data for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. In particular:
- request-access form data is retained for the duration of our consideration of your request and, if access is granted, for the duration of your access plus a reasonable archival period;
- Submitted Materials and output are retained while you have active access and for a reasonable period afterward, after which we may delete or de-identify the data, subject to legal-retention requirements and routine backup cycles;
- log, security, and abuse-prevention data is retained for periods consistent with industry practice and applicable law; and
- we may retain de-identified or aggregated data indefinitely.
You may request earlier deletion as described in Section 11; we will honor such requests subject to legal exceptions (for example, where we are required to retain certain records for compliance, audit, accounting, or dispute-resolution purposes).
11. Your Rights
Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, delete, restrict, or object to certain processing of your personal data, the right to data portability, and the right to withdraw any consent you previously gave. Residents of the European Economic Area, the United Kingdom, Switzerland, California, and certain other U.S. states and jurisdictions may have additional rights under local law.
To exercise any of these rights, contact us at privacy@hoollywoody.com. We may need to verify your identity before responding. We will not discriminate against you for exercising your rights. If you believe we have not adequately resolved your concern, you may have the right to lodge a complaint with your local data-protection authority.
For California residents. In the past twelve (12) months we may have collected the categories of personal information described in Section 4 and disclosed those categories to the categories of recipients described in Sections 7 and 8, in each case for the business and commercial purposes described in Section 5. We do not sell or share personal information for cross-context behavioral advertising. You may designate an authorized agent to submit a request on your behalf, subject to verification.
12. Cookies and Similar Technologies
We and our service providers use cookies, local storage, web beacons, and similar technologies to operate the Service, remember preferences, maintain sessions, measure performance, secure the Service, and detect abuse. Most browsers let you control cookies through their settings; disabling cookies may impair the operation of parts of the Service. Where required by law, we will request your consent before placing non-essential cookies.
13. Do Not Track and Global Privacy Control
Because there is no commonly accepted standard for "Do Not Track" signals, we do not currently respond to such signals. Where required by law, we recognize and process Global Privacy Control or similar opt-out signals as opt-out-of-sale-or-share requests.
14. Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal data, including transport-layer encryption, access controls, isolation of customer data, and audit logging. No system is perfectly secure, however, and we cannot guarantee the absolute security of any data. You are responsible for keeping your access credentials and share links confidential and for promptly notifying us of any suspected unauthorized access.
15. Children
The Service is intended for industry professionals and is not directed to, and we do not knowingly collect personal data from, individuals under the age of eighteen (18). If you believe a person under 18 has provided personal data to us, please contact privacy@hoollywoody.com and we will take reasonable steps to delete it.
16. Third-Party Links and Content
The Service may contain links to third-party websites or content that we do not operate or control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third party you interact with.
17. Changes to This Policy
We may update this Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. If we make material changes, we will provide notice through the Service or by email where appropriate. Your continued use of the Service after the effective date of an updated Policy will constitute your acceptance of the updated Policy.
18. Governing Law
This Policy and any dispute arising out of or relating to it will be governed by the laws of the State of Wyoming, U.S.A., without regard to its conflict-of-laws principles, and is subject to the dispute-resolution provisions set out in our Terms of Use.
19. Contact Us
To contact us about this Policy or your personal data, please reach out to QuickFix AI Inc. at privacy@hoollywoody.com.