Privacy Policy

Privacy Policy: HorrorSchool.com

Effective Date: May 5, 2026

1. Introduction

Welcome to HorrorSchool (“we,” “our,” or “us”). Operated by Destination Creation, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered creation tools, including the Script Doctor, Darkroom, Nightmare Engine, and the Vault (collectively, the “Service”). By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

We collect information that you provide directly to us, as well as data collected automatically:

  • Account Information: Name, email address, and encrypted credentials when you register.
  • Financial Information: Payment processing is handled securely via Stripe. We do not store your full credit card details; we only retain transaction metadata (e.g., last 4 digits, expiry date, subscription status).
  • Generative Input & User Content: We collect text prompts, parameters, and any source images or videos you upload. This includes the resulting assets (scripts, images, videos) stored in your personal Vault.
  • Usage & Technical Data: IP addresses, browser types, device identifiers, and “Blood” credit usage logs. We use this for security, debugging, and service optimization.
  • Cookies and Tracking: We use cookies to maintain your session and remember your preferences. You can manage cookie settings in your browser, though some features may become unavailable.

3. How We Use Your Information

We use your data to:

  • Operate the Service: Manage subscriptions, track “Blood” balances, and provide the Vault interface.
  • Power AI Generation: Transmit your prompts and uploaded assets to third-party model providers (e.g., Fal.ai) to generate your requested content.
  • Service Improvements: Analyze anonymized usage trends to refine our tools and UI.
  • Safety & Compliance: Monitor for violations of our Acceptable Use Policy (e.g., illegal content or prohibited gore levels) and fulfill legal obligations.

4. Data Sharing and Third-Party Providers

  • AI Model Providers: We share your input data (prompts/images) with providers like Fal.ai to generate outputs. These providers have their own privacy protocols and are prohibited from using your data to train their models unless explicitly stated otherwise.
  • Service Providers: We share data with vendors who provide hosting (e.g., Vercel, AWS), analytics, and customer support tools.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as a business asset.
  • Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Retention, Security, and Deletion

  • Retention: We retain your account data and Vault contents for as long as your account is active. Usage logs are typically purged or anonymized after 12 months.
  • Security: We implement industry-standard TLS encryption for data in transit and AES-256 encryption for data at rest. However, no method of transmission over the Internet is 100% secure.
  • User Control: You may delete individual assets from your Vault at any time. To request a permanent account deletion, please contact us at [Insert Email].

6. International Data Transfers

Our servers are located in [Canada/USA]. By using HorrorSchool, you understand that your information may be transferred to, stored, and processed in jurisdictions where data protection laws may differ from those in your home country.

7. Children’s Privacy

HorrorSchool is intended for users aged 18 and older. We do not knowingly collect personal information from children under 13 (or 16 in certain jurisdictions). If we become aware that a child has provided us with personal information, we will delete it immediately.

8. Your Rights (GDPR / CCPA / PIPEDA)

Depending on your location, you may have the following rights:

  • Access/Portability: Request a copy of the data we hold about you.
  • Correction: Update inaccurate or incomplete information.
  • Deletion: Request that we erase your personal data.
  • Opt-Out: Object to certain types of data processing.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Effective Date.”